RE: Patterns for list broker spam?

"John R Levine" <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]> 
On Fri, 17 Jan 2025, Marc wrote:

>
>> Every day I get a bunch of spam from fake list brokers, invariably from
>> throwaway Gmail or Outlook accounts.
>
> What is helping me a lot is when the message has a softfail spf state and an envelope with @outlook.com / @gmail.com I override the ~all and treat is as -all

Throwaway account == actual Gmail or Outlook account.  Their SPF and DKIM 
all validate.

Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.