On 2021-02-21 15:55, Alex wrote:
It seems Google Forms is being used to send links to malicious sites and junk. It's making it through because of USER_IN_DEF_DKIM_WL. Is it time to remove Google/Gmail from this rule?
adjust that score on dkim wl score USER_IN_DEF_DKIM_WL (4) (4) (4) (4)
Perhaps a meta that combines USER_IN_DEF_DKIM_WL with BAYES_99 adds the points back?
its your spamassassin, cant see why you accepts scores
Perhaps just blocking .link domains altogether? Of course we could just add body rules ad infinitum...
that url is listed in URIBL_BLACK score URIBL_BLACK (4) (4) (4) (4)
https://pastebin.com/gqBJa2DB
i sav you aswell do SHORTCIRCUIT why ?
