Re:: 9D character used in words to avoid detection

2018-11-17 Thread John Hardin
On Sat, 17 Nov 2018, Mark London wrote: Forwarded Message Subject:[OFF-list] 9D character used in words to avoid detection Date: Sat, 17 Nov 2018 15:42:08 -0600 To: Mark London Mark, could you post a full spample to the SA list? Erm, thanks, but it's much pre

Re:: 9D character used in words to avoid detection

2018-11-17 Thread Mark London
Forwarded Message Subject:[OFF-list] 9D character used in words to avoid detection Date: Sat, 17 Nov 2018 15:42:08 -0600 From: Chip M. To: Mark London Mark, could you post a full spample to the SA list? Thanks in advance! "Chip" M. ---

Re: 9D character used in words to avoid detection.

2018-11-17 Thread Mark London
John & Kevin - Thanks for the rules! This tactic was used in a porn blackmail spam. Considering that we are currently are receiving a large amount of those types of spams, it might be possible that this tactic might catch on. Or not! We'll see. - Mark On 11/17/2018 8:23 AM, users-diges

Re: Forgery with SPF/DKIM/DMARC

2018-11-17 Thread John Hardin
On Sat, 17 Nov 2018, David Jones wrote: On 11/17/18 9:52 AM, John Hardin wrote: From: John D. Smith To: kdeu...@vianet.ca Message-ID: <35706717752563516902.8f4660866aa84...@vianet.ca> Couple of things: 1. Recent discussions on this mailing list showed me that the Message-ID should never have

Re: Forgery with SPF/DKIM/DMARC

2018-11-17 Thread David Jones
On 11/17/18 9:52 AM, John Hardin wrote: >> From: John D. Smith >> To: kdeu...@vianet.ca >> Message-ID: <35706717752563516902.8f4660866aa84...@vianet.ca> >> >> Couple of things: >> 1. Recent discussions on this mailing list showed me that the Message-ID >> should never have the recipient's domain

Re: Forgery with SPF/DKIM/DMARC

2018-11-17 Thread John Hardin
On Sat, 17 Nov 2018, David Jones wrote: On 11/16/18 7:44 AM, Robert Fitzpatrick wrote: We're having an issue with spam coming from the same company even though SPF and DKIM is setup with DMARC to reject. Take this forwarded email for instances Original message From: User

Re: Forgery with SPF/DKIM/DMARC

2018-11-17 Thread David Jones
On 11/16/18 7:44 AM, Robert Fitzpatrick wrote: > We're having an issue with spam coming from the same company even though > SPF and DKIM is setup with DMARC to reject. Take this forwarded email > for instances > >> Original message From: User Date: >> 11/15/18 10:42 AM (G

Re: Forgery with SPF/DKIM/DMARC

2018-11-17 Thread Matus UHLAR - fantomas
On 16.11.18 08:44, Robert Fitzpatrick wrote: We're having an issue with spam coming from the same company even though SPF and DKIM is setup with DMARC to reject. Take this forwarded email for instances does the mail pass or fail SPF and DKIM? -- Matus UHLAR - fantomas, uh...@fantomas.sk ;

Re: unexpected FN, how to improve/tune to catch

2018-11-17 Thread Matus UHLAR - fantomas
On 15.11.18 09:42, Ian Zimmerman wrote: > # This one disables Bayes. ... > tiny detail. use_learner 0 On Fri, 16 Nov 2018 09:52:05 +0100 Matus UHLAR - fantomas wrote: 1. this description is invalid. use_bayes disables bayes. On 16.11.18 14:13, RW wrote: use_learner 0, in theory, disables