Re: FIlter

2017-12-11 Thread David Jones
On 12/11/2017 01:19 PM, Junk wrote: I wonder in addition to what recomened i could add to increase the score. I am browsing through the archives to learn more but if you think of something quick i could try. Switching to postfix is my next goal but this requires me to rebuild my server as i want

Re: Flakey spam email. How to filter?

2017-12-11 Thread Bill Cole
On 11 Dec 2017, at 10:44 (-0500), Mark London wrote: I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/bZUt0ThS These spams are being sent

Re: Flakey spam email. How to filter?

2017-12-11 Thread David Jones
On 12/11/2017 02:55 PM, Tobi wrote: @Dave you're sure that trusted_networks must be changed in case of fetching mails? I fetch mines from gmail too and sa always has the correct first non trusted relay. Without changing *_networks. With fetching you do not get an smtp received header so sa jum

Re: Flakey spam email. How to filter?

2017-12-11 Thread Tobi
@Dave you're sure that trusted_networks must be changed in case of fetching mails? I fetch mines from gmail too and sa always has the correct first non trusted relay. Without changing *_networks. With fetching you do not get an smtp received header so sa jumps to the next relay. And (at least fr

Re: FIlter

2017-12-11 Thread Junk
> On 12/11/2017 01:19 PM, Junk wrote: >> I wonder in addition to what recomened i could add to increase the >> score. >> I am browsing through the archives to learn more but if you think of >> something quick i could try. >> Switching to postfix is my next goal but this requires me to rebuild my >>

RE: FIlter

2017-12-11 Thread Kevin Miller
At some point you have to write some rules specific to your mail stream. At least I did. Since the spammers always strike first, there's a bit of lag time before they get put on RBLs or rules written and published by others. Spam seems to follow somewhat seasonal patterns. Often in the early

Re: FIlter

2017-12-11 Thread David Jones
On 12/11/2017 01:19 PM, Junk wrote: I wonder in addition to what recomened i could add to increase the score. I am browsing through the archives to learn more but if you think of something quick i could try. Switching to postfix is my next goal but this requires me to rebuild my server as i want

RE: FIlter

2017-12-11 Thread Junk
I wonder in addition to what recomened i could add to increase the score. I am browsing through the archives to learn more but if you think of something quick i could try. Switching to postfix is my next goal but this requires me to rebuild my server as i want to stage the switch and ubuntu server

Re: Flakey spam email. How to filter?

2017-12-11 Thread Pedro David Marco
Mark you are right: mix of upper and lower letters + huge div height (500px) + HTML email with no HTML tag + suspicious URLs + suspicious (to me) mailer (i cannot find much in google about moonray mailer)... i wish SA had a rule to test only the HTML tags... (rawbody - body)...   maybe this can

Re: Flakey spam email. How to filter?

2017-12-11 Thread Mark London
On 12/11/2017 10:59 AM, Reindl Harald wrote: Am 11.12.2017 um 16:44 schrieb Mark London: I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/

Re: Flakey spam email. How to filter?

2017-12-11 Thread David Jones
On 12/11/2017 09:44 AM, Mark London wrote: I'm getting a lot of flakey spam messages,  that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example.   Any suggestions? https://pastebin.com/bZUt0ThS These spams are being sent to my gmai

Flakey spam email. How to filter?

2017-12-11 Thread Mark London
I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/bZUt0ThS These spams are being sent to my gmail account, and then forwarded to my work add