Re: [Mailman-Users] Recent phishing mails are targeting mailing-lists -- and do pass

2017-09-26 Thread Grant Taylor via Mailman-Users
On 09/26/2017 07:23 AM, Richard Shetron wrote: Spamassassin produces a numeric rating for for an email based on multiple rules.  Legitimate email can easily get a rating of 3 or 4 based on the way you have it configured.  I've seen double digit ratings as well.  If you check for a single digit,

Re: [Mailman-Users] Recent phishing mails are targeting mailing-lists -- and do pass

2017-09-26 Thread Robert Heller
At Tue, 26 Sep 2017 09:23:21 -0400 Richard Shetron wrote: > > Spamassassin produces a numeric rating for for an email based on > multiple rules. Legitimate email can easily get a rating of 3 or 4 > based on the way you have it configured. I've seen double digit ratings > as well. If you ch

Re: [Mailman-Users] Recent phishing mails are targeting mailing-lists -- and do pass

2017-09-26 Thread Richard Shetron
Spamassassin produces a numeric rating for for an email based on multiple rules. Legitimate email can easily get a rating of 3 or 4 based on the way you have it configured. I've seen double digit ratings as well. If you check for a single digit, you may be filtering legitimate emails that ha

Re: [Mailman-Users] Recent phishing mails are targeting mailing-lists -- and do pass

2017-09-26 Thread Robert Heller
One thing *I* have discovered is that "bogus" messages (eg phishing, etc. spam), often have various envlope headers that give them away. One is a "Reveived: " from a mail server with no reverse DNS ('Reveived: from ... (unknown [ddd.ddd.ddd.ddd])', so a spam filter rule like this: "Received: f