On Tue, 14 Aug 2018, micah anderson wrote:

John Hardin <jhar...@impsec.org> writes:

On Tue, 14 Aug 2018, micah anderson wrote:

John Hardin <jhar...@impsec.org> writes:

On Tue, 14 Aug 2018, micah anderson wrote:

OK, I can see about adding some mobile MUA exclusions. Any FP headers you
can provide (directly) will be helpful. Go ahead and sanitize the
recipient info, I don't think that would be relevant to tuning this one.

I put 4 of the messages here:

https://pastebin.com/YuPtBQXN

thanks for your help!

micah

Thanks.

Yesterday I added a FP avoidance check for DKIM based on the (very few) ham hits that are in the masscheck corpus; it seems that should be enough to avoid these messages as he's sending via gmail and it adds DKIM.

I'm adding some xmailer subrules - the mobile MUA coverage is thin. I don't expect to see a lot of overlap, but I may add them anyway based on your report.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Politicians never accuse you of "greed" for wanting other people's
  money, only for wanting to keep your own money.    -- Joseph Sobran
-----------------------------------------------------------------------
 Today: the 73rd anniversary of the end of World War II

Reply via email to