Alex skrev den 2022-12-16 21:18:
https://pastebin.com/VpPmgGN4
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
netblocks are authorized
505,425 individual IPv4 addresses
i think so many spamming ips is very spammy !
https://multirbl.valli.org/lookup/40.107.96.128.html 11 blacklisted
rbls, 8 welcome listed, still good prof imho not ham mail
There's also a FP on KAM_ZWNJ, or at the least is not a malicious
email intended to elude anything.
start removing fp rule sets if its not what you want :)
Can someone help me understand what's happening here?
need non modified sample if more help is wanted