Re: Blocking Malformed "From" Headers

2024-07-17 Thread Kirk Ismay
they're using for outgoing MSA service) then just turn off the MSA feature for that specific sendmail instance to stop that processing: "FEATURE(` no_default_msa')" On Wed, 17 Jul 2024, Kirk Ismay wrote: I have a spammer using a malformed From header, as follows: From: sha.

Blocking Malformed "From" Headers

2024-07-17 Thread Kirk Ismay
I have a spammer using a malformed From header, as follows: From: sha...@marketcrank.com The envelope from is: direcc...@delher.com.mx, and I've set up blocks for that address. Sendmail is munging the From: header to change to , so it ends up looking like a local address to my users. How

Reporting Spam to csa-complai...@eco.de

2024-03-01 Thread Kirk Ismay
I've got a lot of finance / political spam that is passing through all filters because it's DKIM signed and using an email provider (salesforce.com & others).   One thing they do include is a X-CSA-Complaints: csa-complai...@eco.de header, which looks legit. Has anyone had success with reporti

Re: Gift Card Scam

2024-01-04 Thread Kirk Ismay
On 2024-01-04 1:57 p.m., Matija Nalis wrote: bodyGIFT_CARD /gift card/i score GIFT_CARD 1.5 metaFREEMAIL_GIFTCARDSGIFT_CARD && (FREEMAIL_FROM || !DKIM_VALID) score FREEMAIL_GIFTCARDS6.0 If you're not big on gift cards. Also, you might want to enable and train Bayes...