Question about forwarding email (not specifically SA, pointers greatly appreciated)

2024-01-02 Thread Thomas Cameron via users
Howdy, all - This is not strictly SpamAssassin related, but y'all probably know where to point me to make this work. I built email servers for a non-profit I volunteer for. If email comes into the server for presid...@myassociation.org, I would normally just create an alias in /etc/aliases

Re: MS-relayed spam

2024-01-02 Thread Bill Cole
On 2024-01-01 at 16:28:04 UTC-0500 (Mon, 1 Jan 2024 16:28:04 -0500) Charles Sprickman is rumored to have said: Hi all, Full headers are here as well: https://pastebin.com/wHNmnvtE I'm not really following what's going on here - a few things confuse me... - the empty from envelope, which

Re: MS-relayed spam

2024-01-02 Thread David Jones via users
I would report this to Microsoft Abuse and setup local rules that add a point or two something like this: header BAD_O365_SENDER X-OriginatorOrg =~ /.*\.onmicrosoft\.com$/ With a threshold of 6.2, you might want to consider either lowering that a little or bumping up some default scores for

Re: MS-relayed spam

2024-01-02 Thread Matus UHLAR - fantomas
On 01.01.24 16:28, Charles Sprickman wrote: Full headers are here as well: https://pastebin.com/wHNmnvtE neither indicate that the mail was relayes by microsoft. Isn't this just backscatter, non-delivery notice on fake mail? I'm not really following what's going on here - a few things

Re: MS-relayed spam

2024-01-02 Thread Torpey List
I started forwarding full headers and text to "ab...@outlook.com" and they blocked my IP. -Original Message- From: David Jones via users Sent: Tuesday, January 2, 2024 1:07 PM To: Charles Sprickman Cc: SA Mailing list Subject: Re: MS-relayed spam I would report this to Microsoft

Re: MS-relayed spam

2024-01-02 Thread Shawn Iverson
On Tue, Jan 2, 2024 at 3:11 PM Torpey List wrote: > I started forwarding full headers and text to "ab...@outlook.com" and > they > blocked my IP. > > ab...@outlook.com is for reporting abuse on the freemail Outlook/Hotmail/MSN platforms, not Microsoft tenants. https://msrc.microsoft.com/report/

Re: Question about forwarding email (not specifically SA, pointers greatly appreciated)

2024-01-02 Thread Andy Smith
Hi Thomas, On Tue, Jan 02, 2024 at 04:24:37PM -0600, Thomas Cameron via users wrote: > I built email servers for a non-profit I volunteer for. If email comes into > the server for presid...@myassociation.org, I would normally just create an > alias in /etc/aliases so that emails to president@ get

Re: Question about forwarding email (not specifically SA, pointers greatly appreciated)

2024-01-02 Thread Greg Troxel
"Thomas Cameron via users" writes: > I built email servers for a non-profit I volunteer for. If email comes > into the server for presid...@myassociation.org, I would normally just > create an alias in /etc/aliases so that emails to president@ get > forwarded to the president's "real" email

Re: Question about forwarding email (not specifically SA, pointers greatly appreciated)

2024-01-02 Thread Jared Hall via users
On 1/2/2024 5:24 PM, Thomas Cameron via users wrote: The problem is, when I send email to presid...@myassociation.org, gmail rejects the forwarded email because it appears to come from my personal domain, not the mythical myassociation.org domain. DKIM, DMARC, and SPF all fail, which I