[TriLUG] (no subject)

[Matt Flyer via TriLUG]

I would think that FORGED_YAHOO_RCVD and URIBL_BLOCKED would be tell
tail indicators.  Perhaps their score isn't high enough?

The URI blocked raises the question of which RBL?  

Does the Trilug mail server subscribe to any of the RBL lists, like
Spamhaus?

On Mon, 2018-12-03 at 08:15 -0500, Mauricio Tavares via TriLUG wrote:
> On Mon, Dec 3, 2018 at 8:08 AM David Both via TriLUG <trilug at trilug.o
> rg> wrote:
> > 
> > 
> > How did this spam get through?
> > 
>       I looked at the spamassassin score
> 
> X-Spam-Status: No, score=3.2 required=5.0
> tests=BAYES_50,FORGED_YAHOO_RCVD,
> FREEMAIL_FROM,HTML_MESSAGE,MIME_QP_LONG_LINE,SPF_NEUTRAL,URIBL_BLOCKE
> D
> autolearn=no version=3.3.2
> 
> and think I might need to see what is the score for each of those
> tests. We will feed this email back to spamassassin bayesian filter
> as
> a spam so hopefully it will help some.
> 
> > 
> > On 12/3/18 8:04 AM, Phil Smith via TriLUG wrote:
> > > 
> > > Unbelievable! http://snip>;
> > > It’s exactly the thing that I wanted!
> > > 
> > > 
> > > Phil Smith
> > > 
> > > 
> > > 
> > > 
> > --
> > 
> > *********************************************************
> > David P. Both
> > *********************************************************
> > The value of any software lies in its usefulness
> > not in its price.
> > 
> > — Linus Torvalds
> > *********************************************************
> > 
> > --
> > This message was sent to: raubvogel at gmail.com <raubvogel at gmail.com>
> > To unsubscribe, send a blank message to trilug-leave at trilug.org
> > from that address.
> > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilu
> > g
> > Unsubscribe or edit options on the web  : https://www.trilug.org/ma
> > ilman/options/trilug/raubvogel%40gmail.com
> > Welcome to TriLUG: https://trilug.org/welcome