Mailing List Archive: Google Forms spam

On 2021-02-21 15:55, Alex wrote:

> It seems Google Forms is being used to send links to malicious sites
> and junk. It's making it through because of USER_IN_DEF_DKIM_WL. Is it
> time to remove Google/Gmail from this rule?

adjust that score on dkim wl

score USER_IN_DEF_DKIM_WL (4) (4) (4) (4)

> Perhaps a meta that combines USER_IN_DEF_DKIM_WL with BAYES_99 adds
> the points back?

its your spamassassin, cant see why you accepts scores

> Perhaps just blocking .link domains altogether? Of course we could
> just add body rules ad infinitum...

that url is listed in URIBL_BLACK

score URIBL_BLACK (4) (4) (4) (4)

> https://pastebin.com/gqBJa2DB

i sav you aswell do SHORTCIRCUIT why ?