View Single Post
Old 30 Apr 2019, 07:37 AM   #35
SideshowBob
Essential Contributor
 
Join Date: Jan 2017
Posts: 278
Quote:
Originally Posted by snappy View Post
I have a FreeBSD server that runs a daily security check and emails the result. There are numerous brute-force SSH attempts with suspicious reverse DNS which seems to trip a lot of the filters. Sometimes VADESPAM appears with a +5 increment tipping over my custom threshold of 8. If if it weren't for VADESPAM false positives would be highly unlikely.
Whitelist it or have it bypass spam filtering.

You are emailing text that probably contains the hostnames of compromised servers, some of which may have been controled by spammers or used for hosting malware.

There may also be anomalies in your setup that suggest it's not a well run mail server. Bear in mind that Fastmail is very lax about what they accept via their MTA and will accept things that most mail servers would reject outright.
SideshowBob is offline   Reply With Quote