Are you using KAM.cf rules? The crim rules are designed for these. On Tue, Jan 22, 2019, 12:27 Joseph Brennan <bren...@columbia.edu wrote:
> > Sent to me personally. Incredible amount of obfuscation. They are all > coming in from hosts in 185.118.165 and 185.118.166. > > Note on X-Spam-Score header-- the local rule CU_INVOICE accounts for 0.5, > HTML_MESSAGE is 0.01, and CU_SPF_softfail is just information with a zero > score. > > https://pastebin.com/p6xaWcA7 > > Joseph Brennan > Columbia U > >