Loren - Unfortunately, LW_BOGUS_ORDER doesn't get triggered for my
email, because there is no List-Id. The email actually came from a
microsoft account. - Mark
header __LW_SUB_INVOICE Subject =~ /\b(?:invoice|order)\b/
header __LW_FROM_INVOICE From =~ /\b(?:invoice|order)\b/
header
On Thu, 2021-06-17 at 17:10 -0700, Loren Wilton wrote:
> A number of the rules I passed along are generic "order" rules rather
> than Amazon specific. I had to go back to last month's spam to find an
> Amazon order spam, but I've gotten a dozen or so fake orders for other
> things this month, all
On 6/16/21 6:18 PM, Loren Wilton wrote:
Here are a handful of rules that work for me. Feel free to try them.
If you do, please let me know how they work for you.
Thank you Loren. I'm marking your message for future use if these spam
messages turn into a problem.
(Apologies for my mail
Loren
- Original Message -
From: Mark London
To: users@spamassassin.apache.org
Sent: Thursday, June 17, 2021 8:52 AM
Subject: Re: Maybe it's time to revive EvilNumbers?
Loren - Unfortunately, the fake amazon shipment email that we received,
doesn't contain the word Amaz
. And they left the postal address of amazon, without the word
amazon.
I hate bogus spam that is so obviously bogus that it avoids filter
rules. :) - Mark
On 6/17/2021 10:52 AM, users-digest-h...@spamassassin.apache.org wrote:
Subject:
Re: Maybe it's time to revive EvilNumbers?
From:
"Loren W
Here are a handful of rules that work for me. Feel free to try them.
If you do, please let me know how they work for you.
(Apologies for my mail client trashing the formatting.
Be sure to check for possible line wrap on some of the rules!)
Loren
body LW_PAYMENT
On 6/15/21 10:11 AM, Mark London wrote:
My site is getting a lot of spam that is getting past spamassassin.
Because it has a hone number to call, and rather than a link to login
using username and password. Mostly fake amazon purchases. They are
getting past a lot of URL block lists
On Wed, 16 Jun 2021 11:52:24 -0400
Alan wrote:
> I'm already getting FPs when someone does a copy/paste of an Amazon product
> page
> and sends it as mail.
>...
>The sender's signature typically has a phone number as well, so
>EvilNumbers would make things worse.
Probably not. The original
On 2021-06-15 19:44, Loren Wilton wrote:
My site is getting a lot of spam that is getting past spamassassin.
Because it has a hone number to call, and rather than a link to login
using username and password. Mostly fake amazon purchases. They are
getting past a lot of URL block lists because
My site is getting a lot of spam that is getting past spamassassin.
Because it has a hone number to call, and rather than a link to login
using username and password. Mostly fake amazon purchases. They are
getting past a lot of URL block lists because of that. FWIW. - Mark
I have a
My site is getting a lot of spam that is getting past spamassassin.
Because it has a hone number to call, and rather than a link to login
using username and password. Mostly fake amazon purchases. They are
getting past a lot of URL block lists because of that. FWIW. - Mark
11 matches
Mail list logo
