<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hi,</p>
    <p>The syntax you are looking for is *.domain.com --the dot will get
      rid of those subdomains.<br>
    </p>
    <p>In many cases you have to look at the headers rather than the
      address presented in the e-mail client to find out what the real
      sending domain was.</p>
    <p>SPAM Assassin settings below 5 really clobber a lot of legitimate
      e-mail.</p>
    <p>I worked for a few years as the Senior Systems Engineer for an
      ISP and once you get to this level of attack you may need to
      resort to blocking them by IP at your firewall.</p>
    <p>Good luck,</p>
    <p>Garrett<br>
    </p>
    <div class="moz-cite-prefix">On 5/10/24 09:21, Michael D Wailes
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:em53d77d73-0722-47bd-ba7e-726bf4dc35a2@b1d65729.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <style id="css_styles">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }a img { border: 0px; }li[style='text-align: center;'], li[style='text-align: center; '], li[style='text-align: right;'], li[style='text-align: right; '] {  list-style-position: inside;}body { font-family: 'Segoe UI'; font-size: 12pt; }.quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb solid; padding-left: 0.3em; }</style>
      <div>Hello!</div>
      <div><br>
      </div>
      <div>I have a question about SPAM Assassin and hoping maybe I can
        find some help here.</div>
      <div>My inbox is getting bombed with SPAM right now -- so bad that
        I've had to set the SPAM Assassin Threshold Score to 1 and am
        still getting 40-60 emails a day that are slipping through.</div>
      <div>I've attempted to also blacklist the domains that are
        consistently sneaking through but don't think I have those set
        correctly. I'm hoping someone here can offer some insight.</div>
      <div><br>
      </div>
      <div>Most of these spammers are using sub-domains such as,
        m.domain.com, so I've been setting the domain in the blacklist
        filter like this:</div>
      <div>*domain.com</div>
      <div><br>
      </div>
      <div>Shouldn't that cover any and all traffic from the specified
        domain?</div>
      <div><br>
      </div>
      <div id="signature_old" style="clear:both">
        <div>--</div>
        <table
style="box-sizing:border-box;width:470px;font-family:Helvetica,Arial,sans-serif;"
          width="470" cellspacing="0" cellpadding="0" border="0">
          <tbody style="box-sizing:border-box;">
            <tr style="box-sizing:border-box;" valign="top">
              <td
style="box-sizing:border-box;text-align:initial;font-size:12px;"><span
                  style="box-sizing:border-box;color:#808080;"><strong
                    class="theme-font"
style="box-sizing:border-box;color:#45668E;font-family:sans-serif;">Michael
                    Wailes</strong></span><br
                  style="box-sizing:border-box;">
                <table style="box-sizing:border-box;" cellspacing="0"
                  cellpadding="0" border="0">
                  <tbody style="box-sizing:border-box;">
                    <tr style="box-sizing:border-box;">
                      <td
style="box-sizing:border-box;line-height:14.76px;width:360px;"
                        width="360">
                        <table style="box-sizing:border-box;"
                          cellspacing="0" cellpadding="0" border="0"
                          align="left">
                          <tbody style="box-sizing:border-box;">
                            <tr style="box-sizing:border-box;">
                              <td style="box-sizing:border-box;"><a
                                  href="mailto:mwailes@mdwailes.com"
style="box-sizing: border-box; color: rgb(128, 128, 128); font-family: sans-serif;"
                                  moz-do-not-send="true"
                                  class="moz-txt-link-freetext">mwailes@mdwailes.com</a></td>
                            </tr>
                          </tbody>
                        </table>
                      </td>
                    </tr>
                  </tbody>
                </table>
                <div style="box-sizing:border-box;margin-top:5px;">
                  <table style="box-sizing:border-box;" cellspacing="0"
                    cellpadding="0" border="0">
                    <tbody style="box-sizing:border-box;">
                      <tr
                        style="box-sizing:border-box;padding-top:10px;">
                      </tr>
                    </tbody>
                  </table>
                  <br>
                </div>
              </td>
            </tr>
          </tbody>
        </table>
      </div>
      <div><br>
      </div>
    </blockquote>
    <div class="moz-signature">-- <br>
      <div>
        <div
style="width:100%;font-weight:bold;font-style:italic;font-variant:small-caps;font-size:1.3em;color:#0419d0;">Oliver
          Garrett Burton</div>
        <div>E-mail:<a href="mailto:ogburton@ogburton.com"
            class="moz-txt-link-freetext">ogburton@ogburton.com</a></div>
        <div
style="width:100%;padding 0px 0px 0px 0px;margin 0px 0px 0px 0px;text-align:right;font-weight:bold;font-weight:bold;font-style:italic;font-size:.78em;color:#995555;font-variant:small-caps;">Sent
          From My Linux Desktop</div>
        <div
style="width:100%;text-align:right;font-size:2.0em;color:#000000;">🐧🐧🐧</div>
        <div
style="width:100%;text-align:right;vertical-align:top;font-weight:bold;font-size:0.7em;color:#0419d0;font-variant:small-caps;">Powered
          by Penguins</div>
      </div>
    </div>
  </body>
</html>