Re: Spammer in white list aka USER_IN_DEF_SPF_WL

David, I tried to send the original email to the email address you requested. But your mail hoster blocks (554 5.7.1) my TLDs. And an email to your postmaster to activate my TLD/domain has never been replied. Regards Jan -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Use

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

@lbutlr wrote > Is there a reason you didn't disclose the IP address? That domain is NOT > listed in the current 60_whitelist_spf.cf Sorry, header excerpt got cut-off by nabble: List-Unsubscribe: X-Warn

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

Hi David Thanks a lot for your reply. Please find the redacted headers of the message mentioned above: https://pastebin.com/sjix9CDp (sorry, nabble removed the headers in the initial post) Cheers Jan -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Users-f3.html

Spammer in white list aka USER_IN_DEF_SPF_WL

Hi all Yesterday our mail server received unwanted email from simpliv.com. It was valid DKIM signed for mail.simpliv.com Despite the sender ip was listed at Sorbs the email even passed the bayesian filter: Surprisingly the ip/domain is part of a SA shipped white list: Rule USER_IN_DEF_SPF_WL ga