Re: Rules for norwegian spam

2016-05-12 Thread John Hardin
On Thu, 12 May 2016, Kim Roar Foldøy Hauge wrote: On Thu, 12 May 2016, John Hardin wrote: > 2. Is anyone interested in my current rule set of about 120 rules that > target norwegian spam. One thing to be aware of is publishing rules *can* reduce their effectiveness, as that give spammer

Re: Received header and matching

2016-05-12 Thread David Jones
>From: Alex >Sent: Thursday, May 12, 2016 9:37 AM >To: SA Mailing list >Subject: Received header and matching >Hi, >I'm trying to match some Apple/iTunes fraud and would like to use the >lack of the email having been passed through anything relating to >Apple (contains apple.com, etc), and havin

Re: Rules for norwegian spam

2016-05-12 Thread Kim Roar Foldøy Hauge
On Thu, 12 May 2016, John Hardin wrote: 2. Is anyone interested in my current rule set of about 120 rules that target norwegian spam. One thing to be aware of is publishing rules *can* reduce their effectiveness, as that give spammers something to test and tune against. They do read this l

Re: Rules for norwegian spam

2016-05-12 Thread John Hardin
On Thu, 12 May 2016, Kim Roar Foldøy Hauge wrote: 2. Is anyone interested in my current rule set of about 120 rules that target norwegian spam. One thing to be aware of is publishing rules *can* reduce their effectiveness, as that give spammers something to test and tune against. They do rea

Rules for norwegian spam

2016-05-12 Thread Kim Roar Foldøy Hauge
I am a system administrator of samfunnet.no. We receive some spam, and due to user requests I have spent a fair amount of time improving the spam filters. Our current chain includes postgrey, spf checks, spam assassin, stringent helo requirements, spam assassin with dcc, razor checks and daily

Re: Received header and matching

2016-05-12 Thread John Hardin
On Thu, 12 May 2016, Alex wrote: I'm trying to match some Apple/iTunes fraud and would like to use the lack of the email having been passed through anything relating to Apple (contains apple.com, etc), and having some difficulty with this header: Received: from 56.119.233.220.static.exetel.com.

Received header and matching

2016-05-12 Thread Alex
Hi, I'm trying to match some Apple/iTunes fraud and would like to use the lack of the email having been passed through anything relating to Apple (contains apple.com, etc), and having some difficulty with this header: Received: from 56.119.233.220.static.exetel.com.au ([220.233.119.56] helo=smtp.