Re: Possible spam sign

2020-12-09 Thread RW
On Tue, 8 Dec 2020 10:18:28 -0800 Loren Wilton wrote: > I just received a spam with this interesting From address: > > From: "VA Rate Guide" > > > I wonder if it is worth checking for mail from more than one sender > at once? Multiple senders in "From" headers is rare, but RFC compliant. Wha

Re: Possible spam sign

2020-12-08 Thread John Hardin
On Tue, 8 Dec 2020, Loren Wilton wrote: That probably should have hit at least one scored base rule: https://ruleqa.spamassassin.org/?rule=%2FFROM_2_ Nope. I think my rules are up to date, but maybe not. Feel free to pastebin it and I'll take a look. https://drive.google.com/file/d/1WQ0

Re: Possible spam sign

2020-12-08 Thread Loren Wilton
That probably should have hit at least one scored base rule: https://ruleqa.spamassassin.org/?rule=%2FFROM_2_ Nope. I think my rules are up to date, but maybe not. Feel free to pastebin it and I'll take a look. https://drive.google.com/file/d/1WQ0Mm1iUsKhTj51mFJwwehuTatSm8Nux/view?usp=sha

Re: Possible spam sign

2020-12-08 Thread Luis E. Muñoz
On 8 Dec 2020, at 12:47, Grant Taylor wrote: I think that the strict RFC specification does allow for multiple senders, but I don't remember how it's done and it's so rare that I'd accept the false positive. Yes to both. -lem

Re: Possible spam sign

2020-12-08 Thread Grant Taylor
On 12/8/20 11:18 AM, Loren Wilton wrote: I just received a spam with this interesting From address: From: "VA Rate Guide" Ew. I wonder if it is worth checking for mail from more than one sender at once? The BOFH in me would be tempted to add one point for each extra @. I think that the

Re: Possible spam sign

2020-12-08 Thread Benny Pedersen
Loren Wilton skrev den 2020-12-08 19:18: I just received a spam with this interesting From address: From: "VA Rate Guide" I wonder if it is worth checking for mail from more than one sender at once? Received: from [47.140.131.2] (helo=watson1) by elasmtp-curtail.atl.sa.earthlink.net

Re: Possible spam sign

2020-12-08 Thread John Hardin
On Tue, 8 Dec 2020, Loren Wilton wrote: That probably should have hit at least one scored base rule: https://ruleqa.spamassassin.org/?rule=%2FFROM_2_ Nope. I think my rules are up to date, but maybe not. Feel free to pastebin it and I'll take a look. -- John Hardin KA7OHZ

Re: Possible spam sign

2020-12-08 Thread Loren Wilton
That probably should have hit at least one scored base rule: https://ruleqa.spamassassin.org/?rule=%2FFROM_2_ Nope. I think my rules are up to date, but maybe not.

Re: Possible spam sign

2020-12-08 Thread John Hardin
On Tue, 8 Dec 2020, Loren Wilton wrote: I just received a spam with this interesting From address: From: "VA Rate Guide" I wonder if it is worth checking for mail from more than one sender at once? That probably should have hit at least one scored base rule: https://ruleqa.spamassassin.