Re: docusign fraud using docusign

Noel Butler skrev den 2024-11-10 23:01:
> On 11/11/2024 06:13, John Hardin wrote:
> 
>> On Sun, 10 Nov 2024, Noel Butler wrote:
>> 
>> On 09/11/2024 08:48, MX wrote:
>> 
>> I would just score anything DNSWL at 0. I mean no disrespect to the
>> maintainer of DNSWL but I just don't find it useful these days.
>> Spam is
>> too complex now.
>> local.cf:
>> 
>> score ALL_TRUSTED 0
> 
> Recommand instead informational score 0.0001, ALL_TRUSTED is used in
> metas.
> 
> Thanks John, I wrote those scores long time ago when I got fed up with
> third parties whitelisted domains that were clearly spam, nice to
> report I haven't seen any downsides to it :)  but value your advice so
> will have the team adjust it.

https://www.dnswl.org/?page_id=17

to disable dnswl in spamassassin use

#         previously configured "deny" on the same domain or to override 
an
#         entry (possibly yet to be configured in subsequent config 
directives)
#         on one of its parent domains. Thus an 'allow zen.spamhaus.org' 
with a
#         'deny spamhaus.org' would permit DNS queries on a specific DNS 
BL zone
#         but deny queries to other zones under the same parent domain.
#
#         Domains are matched case-insensitively, no wildcards are 
recognized,
#         there should be no leading or trailing dot.
#
#         Specifying a block on querying a domain name has a similar 
effect as
#         setting a score of corresponding DNSBL and URIBL rules to 
zero, and
#         can be a handy alternative to hunting for such rules when a 
site
#         policy does not allow certain DNS block lists to be queried.
#
#         Example:

# dns_block_rule RCVD_IN_ZEN_BLOCKED_OPENDNS zen.spamhaus.org
# dns_block_rule RCVD_IN_ZEN_BLOCKED zen.spamhaus.org
dns_query_restriction deny dbl.spamhaus.org
dns_query_restriction deny zen.spamhaus.org
dns_query_restriction deny dwl.spamhaus.org

# dns_block_rule RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 
sa-trusted.bondedsender.org
dns_query_restriction deny sa-trusted.bondedsender.org

# dns_block_rule RCVD_IN_VALIDITY_SAFE_BLOCKED sa-accredit.habeas.com
dns_query_restriction deny sa-accredit.habeas.com

# dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED bl.score.senderscore.com
dns_query_restriction deny bl.score.senderscore.com

# dns_block_rule URIBL_ZEN_BLOCKED_OPENDNS zen.spamhaus.org
# dns_block_rule URIBL_ZEN_BLOCKED zen.spamhaus.org

# dns_block_rule SURBL_BLOCKED multi.surbl.org
dns_query_restriction deny multi.surbl.org

# dns_block_rule URIBL_BLOCKED multi.uribl.com
dns_query_restriction deny multi.uribl.com

# dns_block_rule RCVD_IN_DNSWL_BLOCKED list.dnswl.org
dns_query_restriction deny list.dnswl.org
dns_query_restriction deny dwl.dnswl.org