Adding to this, I've received the same emails over the last few weeks. I've been able to filter by increasing the SpamAssassin points of pyzor and failing rDNS, because otherwise this spam isn't setting off any flags.
I'm curious Benoit, did the emails stop on 8/24, then resume on 8/30 for you as well? The entire period between, my domain received no mail from these domains. Frank -----Original Message----- From: mailop [mailto:[email protected]] On Behalf Of Benoit Panizzon Sent: Thursday, August 31, 2017 7:21 AM To: [email protected] Subject: [mailop] Sender MX pointing to *.registrar-servers.com => 100% Spam! Hello Since a couple of days we get a lot of spam from randomly changing domains under gtld bid. faith. website. loan. to name a couple. Now I found one thing in common to those spam mails. All of them point to MX Records from: eforward1.registrar-servers.com. to eforward5.registrar-servers.com. run by a registrar service. Interestingly not the same used to register the domains in question. Does anyone know, if those MX are used for non spam? Or could this be taken as spam criteria? -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop ________________________________ [xyTel Logo] xyTel Lists p: w: xytel.net<https://xytel.net> _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
