"random" spam

[Walt Thiessen]

Thanks Mark. What initial scoring would you recommend with it?

Walt



On 1/4/2017 7:14 PM, Mark Sapiro wrote:
> On 01/04/2017 03:56 PM, Walt Thiessen wrote:
>> The send domains are all different. The servers are all different. The
>> IPs are all different. They end up on blacklists in due course, but by
>> then they've moved on to their next "victim" server IP.
>>
>> Anyone else running into this stuff? Any idea how to block it?
>
> I use Botnet in SpamAssassin - <https://github.com/eilandert/Botnet.pm>
>
> It can help. You have to watch closely for a bit and possibly adjust the
> score, and you will still get occasional false positives, but I like it.
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20170104/7decf79c/attachment.html>