In the last couple of weeks the amount of incoming spam getting passed through our server has increased noticeably. By this I mean that users are receiving spam from senders which used to be blocked by the spam filter.
I have looked in the junkmail folders and there are examples of the same sort of mail from the same sender which used to score 6 or more (spam level is set at 5 in server-manager) and which are now scoring 0.4 - 0.6
Server is 8 without extra contribs, all updates applied.
Not a big problem, but has anyone else noticed this? What could have changed? Or is it something the spammers have changed?
Edit: I've been looking in the documentation to see how I can block particular domains (all the spam is coming from 3 domains). It's not clear to me how to do this.
I've also seen the Email Whitelist/Blacklist contrib but note that it is no longer supported so haven't wanted to risk installing.
If someone could post the correct syntax to block all mail from a domain, I would be very grateful