I would just score anything DNSWL at 0. I mean no disrespect to the maintainer of DNSWL but I just don’t find it useful these days. Spam is too complex now.
Sent from my iPhone > On Nov 8, 2024, at 4:42 PM, Alex <mysqlstud...@gmail.com> wrote: > > > Hi, > Time to remove docusign from RCVD_IN_DNSWL_MED and others that subtract > points? This is not cool at all. > > Even without having these rules, there isn't much in the body to catch a > docusign phish that uses docusign directly. > > https://pastebin.com/ij2MXi6c