Re: Fake paypal email triggers -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM

2025-01-29 Thread Tom Williams via users
Hi!  Casual observer here, but I have a question about the headers. On 1/29/25 12:23 AM, Niamh Holding wrote: (snip) Authentication-Results: spf=softfail (sender IP is 2a01:111:f403:48::209) smtp.mailfrom=euroland.fr; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action

Re: DNS Help

2023-09-11 Thread Tom Williams via users
On 9/11/23 10:35 AM, D Benham wrote: Ok, I need some guidance.  I am getting a lot of this:  0.0 URIBL_BLOCKED  ADMINISTRATOR NOTICE: The query to URIBL was blocked.     See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block  

Re: Reporting spoofing to Amazon

2020-10-24 Thread Tom Williams
On 10/24/20 7:52 AM, Ramon F Herrera wrote: Needless to say, the producers of spam and other malware are getting more and more clever. Amazon is obviously one of the largest targets. I received the e-mail at the bottom, obviously fraudulent. Normally I mark those and remove them. In this ca

Question about the 'URIBL_BLOCKED' rule

2020-04-30 Thread Tom Williams
Hi!  I'm new to this mailing list, but not new to SpamAssassin. I've used it on and off for a number years.  :)   Recently, (within the past 6 months or so) I enabled it for email in a shared web hosting environment (we host with InMotionHosting). Anyway, due to the volume of email traffic the