Re: [Assp-test] Odd behaviour with phishing message

2017-07-20 Thread Colin
Hi James, Thanks for the reply, it turns out that I'm seeing odd behaviour for this recipient as they are in ptrSpamLovers. The behaviour isn't what I would have expected - I see these in the collected message: X-Assp-allLovePTRSpam: 1 X-Assp-allLoveSpam: 1 They are not in spamLovers, so

Re: [Assp-test] Odd behaviour with phishing message

2017-07-20 Thread James Moe
On 07/20/2017 02:25 AM, Colin wrote: > 2017-07-18 22:20:23 m1-12823-00551 [Worker_3] [TLS-in] 89.253.223.149 > to: recipi...@domain.tld recipient delayed: > recipi...@domain.tld > 2017-07-18 22:20:23 m1-12823-00551 [Worker_3] [TLS-in] 89.253.223.149 >

[Assp-test] ASSP SPF Failures

2017-07-20 Thread Doug Lytle via Assp-test
I'm receiving reports of email failures from rackspace.com. Their SPF record is HUGE, but passes testing from mxtoolbox.com and kitterman.com testing tools, I've temporarily had to use SPF override to accept all mail from them. Is this a bug? The logs are showing: 19-07-2017 14:37:47

Re: [Assp-test] Odd behaviour with phishing message

2017-07-20 Thread Colin
Interestingly I’ve had this reported to me today as well. There was a message from the beginning of the month about this but I was away and don’t think anyone picked it up. In all cases, the message is a message that has been greylisted according to the logs yet it has been delivered to the