Re: Maybe it's time to revive EvilNumbers?
My site is getting a lot of spam that is getting past spamassassin. Because it has a hone number to call, and rather than a link to login using username and password. Mostly fake amazon purchases. They are getting past a lot of URL block lists because of that. FWIW. - Mark I have a number of "purchase" rules that add about 30 points for fake Amazon (and other) scams. I haven't had one get thru in the last couple of months since I instituted them, but I only have a personal account and not a whole site, so YMMV. None of them look for phone numbers, but I do have a set of rules for a handful of stolen business addresses commonly used in spams I get. They add a few points when those show up. Loren
Maybe it's time to revive EvilNumbers?
My site is getting a lot of spam that is getting past spamassassin. Because it has a hone number to call, and rather than a link to login using username and password. Mostly fake amazon purchases. They are getting past a lot of URL block lists because of that. FWIW. - Mark
Re: SCORE: FSL_BULK_SIG
On 14.06.21 18:11, Henry Castro wrote: I'm not sure if normal but FSL_BULK_SIG scoring have fluctuated a lot lately. describe FSL_BULK_SIG Bulk signature with no Unsubscribe Is this rule still valid? I've had this problems with internal mail. Fixed by adding local rules. Unfortunately, much of mail seems to hit DCC_CHECK even they don't look bulky. 1.1 points for DCC_CHECK is fine here but FSL_BULK_SIG and other hits pushed mail over required_score. maybe replacing (DCC_CHECK || RAZOR2_CHECK || PYZOR_CHECK) with DIGEST_MULTIPLE would be more safe -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. - Holmes, what kind of school did you study to be a detective? - Elementary, Watkins. -- Daffy Duck & Porky Pig
