RE: [exim] Anti Phishing Trick

Florian Weimer wrote:
> To: Nigel Metheringham
>
> * Nigel Metheringham:
>
> > Which means *everyone* except for very very small closed
> groups, has
> > to use softfail policy - ebay, amazon, the banks etc etc
> because they
> > don't have control of what legitimate recipients do with their mail.
>
> Yes, and everybody treats softfail as a hard failure as a result.
> At least that's what most aficionados seems to do. 8-/

And they are likely correct too: in reviewing
SpamD (spamassassin) logs the softfail is almost
always 100% spam.

The key is to not reject on this criteria alone
but use it in combo with other signs and to use
it as part of the SpamAssassin (etc) scoring
criteria to avoid catching that rare case where
a softfail sender is legit.

--
Herb Martin