Blacklisting A Tricky Sender

General eFa discussion
Post Reply
EFAUser1
Posts: 17
Joined: 22 Dec 2014 18:56

Blacklisting A Tricky Sender

Post by EFAUser1 » 25 Jun 2015 23:10

Dealing with some tricky spammers from Enterprise Tech Reports. I can't fully blacklist them. For example, I blacklisted this address below:
info@hillary.enterprisetechreports.com
The next day they come back and it doesn't matter, because they're sending from:
info@terry.enterprisetechreports.com
So no matter how often you add to the blacklist, they change part of the sender and nothing gets blacklisted. Internally it is marked spam but the user still gets the notification about it. Wouldn't be so bad but that particular spammer sends emails 10+ emails a day so that user gets notified 10+ times a day.

If I just put enterprisetechreports.com into the blacklist, nothing actually gets blocked. Any ideas?

DaN
Posts: 240
Joined: 19 Nov 2014 10:04
Location: Earth

Re: Blacklisting A Tricky Sender

Post by DaN » 26 Jun 2015 07:06

Do you tried *@*.enterprisetechreports.com or *.enterprisetechreports.com?

EFAUser1
Posts: 17
Joined: 22 Dec 2014 18:56

Re: Blacklisting A Tricky Sender

Post by EFAUser1 » 26 Jun 2015 16:17

DaN wrote:Do you tried *@*.enterprisetechreports.com or *.enterprisetechreports.com?
I did not try either because I could have sworn I saw that EFA does not support wildcards. Is that correct?

User avatar
shawniverson
Posts: 3005
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Blacklisting A Tricky Sender

Post by shawniverson » 26 Jun 2015 16:21

That is true, this is a limitation of mailscanner and mailwatch.

Now, why not just disable the Spam Not Delivered notifications in your case?
Version eFa 4.0.2 now available!

EFAUser1
Posts: 17
Joined: 22 Dec 2014 18:56

Re: Blacklisting A Tricky Sender

Post by EFAUser1 » 27 Jun 2015 20:22

shawniverson wrote:That is true, this is a limitation of mailscanner and mailwatch.

Now, why not just disable the Spam Not Delivered notifications in your case?
Wait I'm confused. So you're saying try to do *@* or *.enterprisetechrepots but then you're saying it won't work because EFA doesn't support wildcards.

Can you disable "Spam Not Delivered" notifications for certain domains? On the whole, the spam not delivered notifications are pretty spot on so I'd love to keep them turned on for every domain other than this one giving us issues.

DaN
Posts: 240
Joined: 19 Nov 2014 10:04
Location: Earth

Re: Blacklisting A Tricky Sender

Post by DaN » 29 Jun 2015 07:13

@EFAUser1
To me it is allowed to be wrong. I'm a human.
Last edited by DaN on 03 Nov 2016 07:38, edited 1 time in total.

dbrunt
Posts: 64
Joined: 28 Nov 2015 00:09

Re: Blacklisting A Tricky Sender

Post by dbrunt » 07 Apr 2016 21:47

I just discovered the same issue. My case though, massive SPAM from *@*.xyz and from *@*.*.top

Your are correct, Mailscanner MailWatch white/blacklist does not allow wildcards. Just full domain name or full email address.

But...SpamAssassin white/blacklist does allow wildcards!

Login to Webmin (https://efa.your.domain:10000) and go to SpamAssassin Mail Filter in Servers panel, then Allowed and Denied Addresses.
In Denied addresses, add *.enterprisetechreports.com

webguyz
Posts: 53
Joined: 26 Oct 2016 02:17

Re: Blacklisting A Tricky Sender

Post by webguyz » 03 Nov 2016 00:36

Thanks for the tip about spamassassin and wildcards. But maybe a side affect is I see empty spaces in the Recent Messages list and when clicking on the # side of the empty ones they are from domains I have blacklisted. Do you see the same thing?
efa-recent-messaages.PNG
efa-recent-messaages.PNG (54.22 KiB) Viewed 3102 times

webguyz
Posts: 53
Joined: 26 Oct 2016 02:17

Re: Blacklisting A Tricky Sender

Post by webguyz » 03 Nov 2016 16:55

Turned out the problem was a CSS issue. Class 'blacklisted' showed white characters on a white background.

Looks ok after I tweaked it.

Thanks!

Post Reply