For the record, looking at the 'too big to block' stats, and definitely the o365 spam is leading the pack..

IPs that are temporarily rate limited because of too many invalid recipients reported in a 24 hour period.. (2871 IPs vs Gmail 155 IPs)

Of course, not 100% relative, as their retry algorithms can be vastly different.. but the point is, it is getting to crazy levels.

And so much obvious stuff..

But just sharing one of the latest.. (Caution, headers can be forged)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.143.76.89)

host 103.143.76.89
89.76.143.103.in-addr.arpa domain name pointer unpggl.onmicrosoft.com

But of course the IP is on OBHost LLC

X-EL-THREAT: NO
X-EL-SUSPECT: NO
X-Vade-Score: 0
X-Vade-State: 0
X-MS-Exchange-SenderADCheck: 2
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
X-Forefront-Antispam-Report-Untrusted: .. :NSPM; ..
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b86cf7d6-acf7-4a9b-8515-21b3b6e45fa1;Ip=[103.143.76.89];Helo=[bishopstown-cs.ie]

All of these spam protections can't help at o365 outbound, but yet simple email filters can inbound?

Just a once a month rant, when billion dollar companies are not responsible for the threats leaving their networks..





--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to