> … All emails were spam with links. … We receive such spam mails with a lot of links too. Is there a rule which detects a certain amount of links inside an e-mail ?
// Hans -- From: Rupert Gallagher <r...@protonmail.com> Sent: Wednesday, February 6, 2019 12:55 PM To: SA <users@spamassassin.apache.org> Subject: New type of SPAM aggression This is to inform about a new type of SPAM aggression. We received from Russia, for months, and redirected them automatically to an administrative address for manual inspection. All emails were spam with links. From the standpoint of the attacker(s), all emails were delivered, but none turned into exploits. Today, we learned that "gremlin.ru" included our IPs in their DNSBL. We followed the address to de-list, but gremlin.ru does not exist. So, if you are successful against Russian spam, you will be ... blacklisted by an unknown gremlin.
