Re: New type of spam

Am 2025-10-16 18:20, schrieb Matus UHLAR - fantomas:
> On 13.10.25 19:23, Thomas Barth via users wrote:
>> for several days now, I have been receiving a new type of spam email 
>> that appears to originate from a mailing list. The content of the 
>> emails consists of automatic replies (notification of absence, 
>> vacation, processing). Therefore, I cannot add them to Bayes training.
> 
> Why?

As I understand it, autoresponders, newsletters, and system 
notifications should not be added to the Bayes database. If you write to 
the company and receive their automatic legitimate response, it could be 
mistakenly classified as spam then? Only emails whose content is 
typically spam-like (e.g., advertising, phishing, dubious wording, 
tracking pixels, etc.) are suitable for Bayes.

> 
>> I have already lowered the score for the MAILING_LIST_MULTI check.
> 
> Lowered? Because of this?
> 

The bonus MAILING_LIST_MULTI=-1 is too much for me :)

>> However, the emails are not detected by Spamassassin's standard 
>> blocklists. I don't know how to detect these emails. Which blacklists 
>> (https://www.intra2net.com/en/support/antispam/) should I definitely 
>> add to local.cf in addition to the standard blocklists?
> 
> Can you provide samples? (use web, pastebin or similar service)

I imagine that spammers are also reading this list in order to optimize 
their spam generators. I'm not sure if that's such a good idea. The spam 
messages mentioned were only generated for German-speaking countries 
because only the automatic replies from German companies appear with the 
original addresses, among other things. This type of spam is absolute 
chaos :-)

Regards
Thomas B