spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Leandro <lean...@spfbl.net>
Subject Re: low score on very spammy email
Date Tue, 10 Apr 2018 22:04:39 GMT
2018-04-10 18:52 GMT-03:00 David Jones <djones@ena.com>:

> On 04/10/2018 04:47 PM, Leandro wrote:
>
>> 2018-04-10 17:49 GMT-03:00 Motty Cruz <motty.cruz@gmail.com <mailto:
>> motty.cruz@gmail.com>>:
>>
>>     I apologize here is the email headers and body
>>
>>     https://pastebin.com/bgXrfKaQ
>>
>>
>>
>> You should not take this domain mrface.com <http://mrface.com> seriously
>> because it is a TLD used for free dynamic IP service (changeip.com <
>> http://changeip.com>).
>>
>> There is even a fake Windows Update domain in this TLD:
>>
>> ubuntu@matrix:~$ dig +short A windowsupdate.mrface.com <
>> http://windowsupdate.mrface.com>
>> 185.133.40.63
>>
>>
>>
>>
>>     Thanks,
>>
>>
>>
> I noticed it was listed on the DBL dnsbl.spfbl.net and was just working
> to add that to my local rules.  Anyone know how to set this DBL up in SA?
> I am trying to find an example in the stock SA rules now...
>


Yes. We list any IP using any free dynamic TLD.

A legit mail server never uses crap, or shouldn't use.

Documentation to set this DNSBL at SA:

https://spfbl.net/en/dnsbl/



>
> --
> David Jones
>

Mime
View raw message