Re: question about filtering spam

2016-07-19 Thread Reindl Harald
Am 19.07.2016 um 23:41 schrieb Jan-Kees van Kampen: FWIW all three of those messages came from sources that are on multiple IP-based block-lists (DNSBLs) such as spamhaus.net, spamcop.net, & abuseat.org. If you were using those methods for filtering (either via postfix filtering or SA scoring)

Re: question about filtering spam

2016-07-19 Thread Jan-Kees van Kampen
> FWIW all three of those messages came from sources that are on multiple > IP-based block-lists (DNSBLs) such as spamhaus.net, spamcop.net, & > abuseat.org. > > If you were using those methods for filtering (either via postfix > filtering or > SA scoring) those messages shouldn't have made it th

Re: question about filtering spam

2016-07-19 Thread David B Funk
On Tue, 19 Jul 2016, Jan-Kees van Kampen wrote: Hi John, It would be better if you could post a few spamples to something like pastebin or a webserver you control and send the URLs to the list so that we can see the complete raw messages. here are 3 examples: http://sandberg.nl/sp/ 1 and 2

Re: question about filtering spam

2016-07-19 Thread Jan-Kees van Kampen
Hi John, > It would be better if you could post a few spamples to something like > pastebin or a webserver you control and send the URLs to the list so > that we can see the complete raw messages. here are 3 examples: http://sandberg.nl/sp/ 1 and 2 have the pattern I described before, 3 is anot

Re: question about filtering spam

2016-07-19 Thread John Hardin
On Tue, 19 Jul 2016, Jan-Kees van Kampen wrote: I wrote: attachmentname.split($.)[1] == ".zip/.docx" but I meant of course: attachmentname.split($.).last == "zip" or "docx" ... Sorry if i'm spamming the list ;) It would be better if you could post a few spamples to something like pastebi

question about filtering spam

2016-07-19 Thread Jan-Kees van Kampen
hello list, I wonder how it would be possible to filter a particular spam, it's not triggering scores, but so omnipresent that I suspect more people have had to deal with it one way or another. I'm not sure if this is the right place to ask, and please tell me if I should go elsewhere with my que

Re: question about filtering spam

2016-07-19 Thread Jan-Kees van Kampen
I wrote: > attachmentname.split($.)[1] == ".zip/.docx" but I meant of course: attachmentname.split($.).last == "zip" or "docx" ... Sorry if i'm spamming the list ;)