> Every day I get a bunch of spam from fake list brokers, invariably from > throwaway Gmail or Outlook > accounts.
What is helping me a lot is when the message has a softfail spf state and an envelope with @outlook.com / @gmail.com I override the ~all and treat is as -all Maybe check if your messages match this. > The text in them seems fairly consistent. Anyone have patterns to catch > them? They're quite annoying > since they're hard to separate from the legit mail we get from giant > mail systems. > > TIA > > PS: One time I got spam offering a 3000 name list of attendees from a > recent IETF meeting which was > pretty impressive since only 1000 people were there. :)