Recent content by team2021

Thanks, blocking '.lol' seems like good idea : ) Sadly we had similar email for example from "koloskys.de" ( early this week, now it's not existing domain) According to a random check, it seems to me that increasing the HTML_IMAGE_ONLY_24 score (from 1,282) to maybe 2 could be a solution. We...

Hello, thanks for reply This is log from PMG and whole email in EML format. Can you plese take a look? Aug 9 19:33:00 pmg postfix/smtpd[314413]: connect from mail.infistonsell.lol[178.162.131.38] Aug 9 19:33:01 pmg postfix/smtpd[314413]: 355AA6C2255...

Hello, please advice how to block this kind of email. What custom score is generally safe to increase ? Thanks Subject: Odstraňte papilomy a předejděte rakovině kůže! From: Removio zachraňuje život! <irpipbz@infistonsell.lol> Date: 09/08/2023 16:19 Message-ID...

Thanks So you recommendation is to increase custom score to RCVD_IN_HOSTKARMA_BL and GB_SUBJ25 so that the score is higher than 2?

hello, this spam (sharepoint phising) passed through the PMG filter. Do I understand correctly that mail was supposed to have a score of 2 (1.5 + 0.5), but he only got a score of 1? Please, what do you recommend to improve so next similar mail does not go through? ( we mark as spam from score...

Hello, just feedback for those who are concerned about upgrading. On Hetzner AX61-NVMe was upgrade from 7.1 to 7.2 without issue

Hello, we use an email round trip monitor for our email server, which regularly sends emails to verify the functionality of mail transmission. Unfortunately, this means that the Tracking Center at PMG is full of these emails and makes it difficult to keep track. Is it possible to exclude some...

Thanks, i look in to that In the meantime, I made a hotfix by creating a rule to accept if the email contains our unique tenant ID (guid string) in body and the sender is @sharepointonline.com This may not be such a bad solution in the end - I won't have to disable "FAKESHAREPOINT" and the risk...

Hello, recently we noticed that legitimate emails from Office 365 SharePoint, fall into spam. And it looks like emails are getting a score "KAM_FAKESHAREPOINT". But I can't think of why, these are legitimate sharepoint emails informing about file sharing etc. If I open mail body, then i see...