A lot of times when I'm fighting spam the right question isn't "Does it
sound reasonable to human ears to block this pattern" as much as it is
"Based on auditing and testing, does this actually cause false
positives."
Sometimes I'll block a perfectly legitimate sounding phrase in an email
subject, and anyone reading it thinks I'm insane, but then it's not
until 4 years later that the first false positive hits.
On 2026-06-12 12:38, Randolf Richardson, Postmaster via mailop wrote:
The word "rechnung" is German for "invoice" according to Google.
It's reasonable for companies sending invoices in PDF format to
include the word "invoice" in the filenames. This makes it easier
for customers to find invoices when searching their local file
systems, and I know some end users who do exactly that instead of
organizing files into folders (they often don't utilize eMail folders
either, although I've had some success convincing people to change
their habits in this regard with positive results -- overall it's an
uphill battle, unfortunately).
So if a German company includes the word "rechnung" in the filenames
of their invoices, I don't really see why it should be a trigger, so
I guess I'm missing something here.
It's very likely that "rechnung" in the filename is actually the
trigger here. There has been a deluge of phishing mails
using such attachments. Rejecting just on the name doesn't seem too
smart, but spamfighing isn't an exact science...
Cheers,
Hans-Martin
Am 12. Juni 2026 12:37:47 schrieb Benoît Panizzon via mailop
<[email protected]>:
> Hi Team
>
> Lots of our customers nowadays choose to receive our invoices by email.
>
> SPF Entry => Correct
> DKIM Signature => Validation passes
> DMARC Policy => Published
> Sender IP => Not on any know blacklist
>
> Microsoft / Google / GMX / Any other ESP accept the emails and don't
> flag them as spam.
>
> Only @icloud.com almost always rejects all emails containing a PDF
> with the filename containing "rechnung" and text containing "rechnung".
>
> It looks like it's a combination of the body text and PDF which causes
> the emails to be rejected. Of we send only the body text, but no PDF,
> the email gets through, if we only send the PDF and an empty body, it
> gets throught. We tried to alter the body text in various ways, but as
> soon as there are more then a dozen of lines, the whole emails is being
> rejected.
>
> Anyone an insight what could cause the issue? Any contact @ Apple to
> help figure out the cause?
>
> --
> Mit freundlichen Grüssen
>
> -Benoît Panizzon- @ HomeOffice und normal erreichbar
> --
> I m p r o W a r e A G - Leiter Commerce Kunden
> ______________________________________________________
>
> Zurlindenstrasse 29 Tel +41 61 826 93 00
> CH-4133 Pratteln Fax +41 61 826 93 01
> Schweiz Web http://www.imp.ch
> ______________________________________________________
> _______________________________________________
> mailop mailing list
> [email protected]
> https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
