On 11/21/24 18:42, pgnd wrote:
Starting about 2 weeks ago, I've been playing whack-a-mole with waves of
'your mail box is full' phish, e.g.
"Subject: The storage on your Webmail account is about full. You've
used up all of the storage."
, sneaking past my SA protections. Whether to call it snowshoe, I
dunno :-/ But my usually well fed Bayes isn't getting noticeably better
with 'em.
There's a modicum of badly-done personalization attempted in them. It's
usually laughably obvious spam to the eye.
I'd like to make it go away with my filters.
I can certainly do a bit of custom tweaking of SA scores, add header/
content exlcusions @ Postfix, etc.
I'm not beyond dropping the entire spammy ASN at my edges ...
But, first, wondering what, if any, better 'standard' SA options for
dealing with it are?
So as not to spam the list, here's a gist with headers/content from one
today,
https://gist.github.com/pgnd/5ab934d921939f4c62a4c978a30b9e6f
Any general approaches to getting rid of this class of noise in SA?
X-Spam-Status: NO, score=6.6 required=8.0
Using SA's default score of required 5.0 would have caught it
