Obvious spam getting through

Peter H. Lemieux mailscanner at replies.cyways.com
Wed Dec 14 22:42:09 UTC 2016


If you don't want to reject them outright, bump up their scores in 
SpamAssassin with a rule like

header TOP_DOMAIN         /Return-Path.*\.top/
score TOP_DOMAIN          3

Peter


On 12/14/2016 05:26 PM, Sterling Chavis wrote:
> Thank you. The ones that are getting through are all .top domains as far
> as I can see. I'll use this method and see how it goes.
>
>
> On 12/14/2016 12:10 PM, Peter Lemieux wrote:
>> I deal with these by refusing mail for most of the new top-level
>> domains like .top.  I've never seen any legitimate mail from any of
>> those, nor have I received any complaints about missing messages.  My
>> current blacklist includes:
>>
>> click
>> date
>> faith
>> party
>> link
>> xyz
>> download
>> top
>> space
>> win
>> stream
>> gdn
>> website
>> bid
>> loan
>> review
>> science
>>
>> I handle this screening via the access database in sendmail, not
>> through MailScanner.
>>
>> Peter
>>
>>
>> On 12/14/2016 02:03 PM, Sterling Chavis wrote:
>>> The other day I started to get slammed with spam. SpamAssassin was
>>> doing a
>>> very good job before that, and is still catching many. Couldthey be
>>> spoofing
>>> the X-Mailscanner headers to bypass my mailscan rules? Here is an
>>> example of
>>> the ones that are getting through:
>>>
>>> Return-Path:
>>> <chronic.constipation.remedy at pessimist.rightcontipationscare.top>
>>
>>
>
>
>


More information about the MailScanner mailing list