Oh, please note I just noticed bayes wasn't consulted for this. It's a new system and was having some database problems, but bayes hasn't always been effective on these anyway.
Thanks, Alex On Wed, Feb 17, 2016 at 11:49 AM, Alex <mysqlstud...@gmail.com> wrote: > Hi all, > > I recall some rules that were written years ago to address these, but > it appears they're back. We've been hit with a few, including users > actually following the link. I was hoping someone had some > recommendations on how to stop them. > > http://pastebin.com/zKWUUQ0Q > > Obviously they're coming in advance of being on an RBL or DNSBL. > > I was thinking to correlate the body text somehow with something that > checks to see if it actually passed through Google (SPF, etc?), but > that won't work for messages that were forwarded to another user... > > Thanks, > Alex
