On 09/14/2017 01:37 PM, Dianne Skoll wrote:
On Thu, 14 Sep 2017 11:27:27 -0700
"Loren Wilton" <lwil...@earthlink.net> wrote:
Other than being obvious spam, they seem to be set up as though they
were legitimate commercial mailing list stuff, often containing
things like contact-id and the like in the links.
Is anyone else seeing these?
A small number. The cont...@cron-job.org address is only in the From:
header; the envelope recipients look randomly-generated and sometimes
from unrelated domains.
Should be easy to block. Just block the cron-job.org domain.
blacklist_from *@cron-job.org
whitelist_auth *@cron-job.org
This should allow messages passing SPF or DKIM and block all others,
correct?
Regards,
Dianne.
--
David Jones
