Re: SPF failure very low score

2013-08-12 Thread John Hardin
On Mon, 12 Aug 2013, Bowie Bailey wrote: On 8/12/2013 2:48 PM, John Hardin wrote: On Mon, 12 Aug 2013, Quanah Gibson-Mount wrote: > --On Friday, August 09, 2013 12:42 AM +0200 Benny Pedersen wrote: > > > > >body __BODY_FACEBOOK /Facebook/ > >meta __FORGED_SENDER (!SPF_PASS && !DKI

Re: SPF failure very low score

2013-08-12 Thread Bowie Bailey
On 8/12/2013 2:48 PM, John Hardin wrote: On Mon, 12 Aug 2013, Quanah Gibson-Mount wrote: --On Friday, August 09, 2013 12:42 AM +0200 Benny Pedersen wrote: body __BODY_FACEBOOK /Facebook/ meta __FORGED_SENDER (!SPF_PASS && !DKIM_VALID_AU) meta FORGED_FACEBOOK_BODY (__BODY_FACEBOOK &&

Re: SPF failure very low score

2013-08-12 Thread John Hardin
On Mon, 12 Aug 2013, Quanah Gibson-Mount wrote: --On Friday, August 09, 2013 12:42 AM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-08-08 23:22: > I would love to see your rules here so I can see how you did it. I > don't see if/and in the SA docs on rules. body __BODY_

Re: SPF failure very low score

2013-08-12 Thread Quanah Gibson-Mount
--On Friday, August 09, 2013 12:42 AM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-08-08 23:22: I would love to see your rules here so I can see how you did it. I don't see if/and in the SA docs on rules. body __BODY_FACEBOOK /Facebook/ meta __FORGED_SENDER (!SPF_PASS && !

Re: New spam rule for specific content

2013-08-12 Thread John Hardin
On Mon, 12 Aug 2013, Kris Deugau wrote: Amir 'CG' Caspi wrote: My main feeling is that if anyone is sending HTML email with LOTS of stuff commented out, that email is almost certainly spam. Ham HTML email would probably be done with more care. *snigger* Take a look at the raw source from a

Re: New spam rule for specific content

2013-08-12 Thread Kris Deugau
Amir 'CG' Caspi wrote: > My main feeling is that if anyone is > sending HTML email with LOTS of stuff commented out, that email is > almost certainly spam. Ham HTML email would probably be done with more > care. *snigger* Take a look at the raw source from a message sent with Outlook (especiall