Re: Catching Phishing messages

2020-09-24 Thread RW
On Wed, 23 Sep 2020 14:03:32 -0600 @lbutlr wrote: > On 21 Sep 2020, at 08:21, Daryl Rose wrote: > > I don't have the email server, it's hosted by a provider. This > > provider does a crappy job at filtering spam and phishing, so I am > > running ISBG and Spamassassin to block the spam and

Re: Catching Phishing messages

2020-09-23 Thread @lbutlr
On 21 Sep 2020, at 08:21, Daryl Rose wrote: > I don't have the email server, it's hosted by a provider. This provider does > a crappy job at filtering spam and phishing, so I am running ISBG and > Spamassassin to block the spam and phishing. This isn't really a workable solution as there are

Re: Catching Phishing messages

2020-09-21 Thread Daryl Rose
I don't have the email server, it's hosted by a provider. This provider does a crappy job at filtering spam and phishing, so I am running ISBG and Spamassassin to block the spam and phishing. Thanks Daryl On Mon, Sep 21, 2020 at 7:33 AM Bryan K. Walton < bwalton+1576874...@leepfrog.com> wrote:

Re: Catching Phishing messages

2020-09-21 Thread RW
On Mon, 21 Sep 2020 07:33:01 -0500 Bryan K. Walton wrote: > On Sun, Sep 20, 2020 at 09:35:22AM -0500, Daryl Rose wrote: > > I tend to get a lot of phishing attempts, and they all get through. > > > > This appears to come from Apple, but obviously is not. > > Not a spamassassin solution, but

Re: Catching Phishing messages

2020-09-21 Thread Bryan K. Walton
On Sun, Sep 20, 2020 at 09:35:22AM -0500, Daryl Rose wrote: > I tend to get a lot of phishing attempts, and they all get through. > > This appears to come from Apple, but obviously is not. Not a spamassassin solution, but Apple has a DMARC policy of quarantine for those types of emails. If you

Re: Catching Phishing messages

2020-09-21 Thread Daryl Rose
I'm not familiar with RBL. What and how would I use it? Thanks Daryl On Sun, Sep 20, 2020 at 9:42 AM sebast...@debianfan.de < sebast...@debianfan.de> wrote: > What about rbl integration in spamassassin? > > Am 20. September 2020 16:35:22 MESZ schrieb Daryl Rose >: >> >> I tend to get a lot

Re: Catching Phishing messages

2020-09-21 Thread Daryl Rose
I am not using the KAM.cf rule set. I found the script on github. Can I just drop in into /etc/mail/spamassassin stop/start spamassassin and start catching phishing emails? Thanks Daryl On Sun, Sep 20, 2020 at 10:32 AM Kevin A. McGrail wrote: > Are you using the KAM.cf ruleset? > > Can you

Re: Catching Phishing messages

2020-09-21 Thread Daryl Rose
I understand what you're saying. Yes, my email client only shows the fake email address, so to find the actual email address, I copy the header contents into an email header analyzer. I prefer https://mailheader.org/. It breaks apart the header really nicely and I can see the actual email

Re: Catching Phishing messages

2020-09-20 Thread @lbutlr
On 20 Sep 2020, at 08:35, Daryl Rose wrote: > I can blacklist the email address, but I know that won't help. Is there a > rule that I can set up to catch more phishing attempts? SPF and DMARC seem to be the only ways to deal with spams from large senders that are faked, but what is considered

Re: Catching Phishing messages

2020-09-20 Thread Bill Cole
On 20 Sep 2020, at 10:35, Daryl Rose wrote: I tend to get a lot of phishing attempts, and they all get through. This appears to come from Apple, but obviously is not. Subject: Re: Purchase Notification - Here is confirmation of your order Mail From:

Re: Catching Phishing messages

2020-09-20 Thread Kevin A. McGrail
Are you using the KAM.cf ruleset? Can you manually test the email and give the output from the report?  Or put a spample up on pastebin? On 9/20/2020 10:35 AM, Daryl Rose wrote: > > I tend to get  a lot of phishing attempts, and they all get through.   > > This appears to come from Apple, but

Re: Catching Phishing messages

2020-09-20 Thread sebast...@debianfan.de
What about rbl integration in spamassassin? Am 20. September 2020 16:35:22 MESZ schrieb Daryl Rose : >I tend to get a lot of phishing attempts, and they all get through. > >This appears to come from Apple, but obviously is not. > >Subject: Re: Purchase Notification - Here is confirmation of

Catching Phishing messages

2020-09-20 Thread Daryl Rose
I tend to get a lot of phishing attempts, and they all get through. This appears to come from Apple, but obviously is not. Subject: Re: Purchase Notification - Here is confirmation of your order Mail From: > acc.mubmx4btmqkymgfv1leobg.copsess2049113.222...@v2345t3w4t0inbox13.com I can