Am 24.04.2015 um 16:11 schrieb Matus UHLAR - fantomas:
On Fri, 24 Apr 2015 15:38:15 +0200 Reindl Harald <h.rei...@thelounge.net> wrote:well, and how becomes SPF part of the game in case of a throw-away domain as long as "score SPF_NONE 0" - why in the world should a spammer add a TXT record to a throw-away domain?Am 24.04.2015 um 15:50 schrieb Dianne Skoll:Ummm.... are you really that unclear on the concept? I'll explain it carefully: Spammers know that (some) filters filter less aggressively than normal on an SPF "pass". So they register a throwaway domain and use that in the envelope sender. They publish a TXT record for that domain to ensure they get an SPF pass. There. That wasn't so hard, was it?On 24.04.15 15:55, Reindl Harald wrote:and how does that care a SA setup?SA setup will detect such domains and will score mail positively. Is there something other to explain?
i don't really and everybody who pretends the opposite should be quiet in the future when it comes to highly false positive prone rules with scores of 1.5 or even higher
signature.asc
Description: OpenPGP digital signature
