Of Andrey Fyodorov
Sent: Wednesday, March 29, 2006 12:08 AM
To: Imail_Forum@list.ipswitch.com
Subject: RE: [IMail Forum] How do I stop this spam
Some people write this off as a mere whitelisting solution, but it is not.
It is a solution that allows you to manage your incoming mail flow based on
IP
On Wednesday, March 29, 2006, 00:07:56, Andrey Fyodorov wrote:
Some people write this off as a mere whitelisting solution, but it is
not. It is a solution that allows you to manage your incoming mail
flow based on IP reputation:
But that's exactly what IP white/black lists are, do you
Dorman
Sent: Monday, March 27, 2006 4:57 PM
To: Imail_Forum@list.ipswitch.com
Subject: Re: [IMail Forum] How do I stop this spam
On Monday, March 27, 2006, 08:44:00, Martin Schaible wrote:
This means, that your mail server is now a text-only-mail server?
Yeah, I'll vote for that. Send all
Hi,
We analyzed the mail too and we couldn't find any phrase or html construct to create a rule.
I'm alos wondering how other spam filters are dealing with mails like this.
Am Montag, 27. Mrz 2006 um 02:47 schrieben Sie:
here is header---
Add the sender's IP to a custom DNSBL. Tell antispamseeder it's a spam
message.
Do you check for valid helo? For valid reverse dns? For valid from?
I use only IMail for spam-filtering. Any message that fails a test
(except valhelo - happens too much on good messages) is diverted. Any
since nearly 99% of spam attaches an inline gif, what
about writing a rule to mark it as spam?
Bill
Adam Campbell wrote:
Add
the sender's IP to a custom DNSBL. Tell antispamseeder it's a spam
message.
Do you check for valid helo? For valid reverse dns? For valid from?
I use
Add gifs to the attachment-blocking of 8.22.
Spammers have adapted by using jpgs as in the sample.
Content-Type: image/jpeg; name=4649.jpg
adamc
Matrosity Hosting wrote:
since nearly 99% of spam attaches an inline gif, what about writing a
rule to mark it as spam?
Bill
Adam Campbell
Hi,
This would generate high volume of false/positives. Regular mails can also contain inline images, this is often used.
Am Montag, 27. Mrz 2006 um 14:56 schrieben Sie:
since nearly 99% of spam attaches an inline gif, what about writing a
Hi Adam,
Add the sender's IP to a custom DNSBL
You're right. Usualy those mails are from zombie-PC's. you would add
ip-addresses until the rest of you life.
Am Montag, 27. März 2006 um 14:44 schrieben Sie:
Add the sender's IP to a custom DNSBL.
Hi Adam,
This means, that your mail server is now a text-only-mail server?
Am Montag, 27. März 2006 um 15:13 schrieben Sie:
Add gifs to the attachment-blocking of 8.22.
Spammers have adapted by using jpgs as in the sample.
Content-Type:
I would submit 213.96.60.* to the DNSBL.
Don't you want to live forever and see the end of spam?
Like I said earlier, I'm looking into a better solution.
adamc
Martin Schaible wrote:
Hi Adam,
Add the sender's IP to a custom DNSBL
You're right. Usualy those mails are from zombie-PC's. you
infected machines doing direct-to-MX spamming don't defer/retry, so
greylisting and restricted SAV are very effective first lines of defense.
Len
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Hallo Adam,
Don't you want to live forever and see the end of spam?
Why not ;-)
Am Montag, 27. März 2006 um 15:46 schrieben Sie:
I would submit 213.96.60.* to the DNSBL.
Don't you want to live forever and see the end of spam?
Like I said
I may seem rash, but I did run a test of diverting gif-laden messages
using a rule. I had no messages during a three-week trial that were
business-related.
So I added image/gif to attachment blocking, and I had the only instance
of uh-oh last week. I'll reconsider.
adamc
Martin Schaible
infected machines doing direct-to-MX spamming don't defer/retry, so
greylisting and restricted SAV are very effective first lines of defense.
That is normally true but this latest zombie spam DOES retry and gets around
any greylisting.
To Unsubscribe:
On Monday, March 27, 2006, 08:44:00, Martin Schaible wrote:
This means, that your mail server is now a text-only-mail server?
Yeah, I'll vote for that. Send all viruses in source code with
instructions on how to compile and run it :-)
--
[EMAIL PROTECTED] The avalanche has already
Subject: Re: [IMail Forum] How do I stop
this spam?
Buy it at sortmonster.com
Darin.
- Original Message -
From: Kathy Lees
To: IMail_Forum@list.ipswitch.com
Sent: Monday, August 08, 2005 1:05 PM
Subject: Re: [IMail Forum] How do I stop this spam?
I have
You should contact [EMAIL PROTECTED], and/or join
the sniffer support list.
Darin.
- Original Message -
From: Kathy Lees
To: IMail_Forum@list.ipswitch.com
Sent: Tuesday, August 09, 2005 11:30 AM
Subject: Re: [IMail Forum] How do I stop this spam?
Thanks. I got it there and put
Where do I join that list?
- Original Message -
From:
Darin Cox
To: IMail_Forum@list.ipswitch.com
Sent: Tuesday, August 09, 2005 9:56
AM
Subject: Re: [IMail Forum] How do I stop
this spam?
You should contact [EMAIL PROTECTED], and/or join
the sniffer
Have you looked on the sortmonster.com
site?
Darin.
- Original Message -
From: Kathy Lees
To: IMail_Forum@list.ipswitch.com
Sent: Tuesday, August 09, 2005 12:13 PM
Subject: Re: [IMail Forum] How do I stop this spam?
Where do I join that list?
- Original Message
yep. I emailed their support. that should do
it.
- Original Message -
From:
Darin Cox
To: IMail_Forum@list.ipswitch.com
Sent: Tuesday, August 09, 2005 10:37
AM
Subject: Re: [IMail Forum] How do I stop
this spam?
Have you looked on the sortmonster.com
If you look on their site, it's prominent in their
FAQs
Darin.
- Original Message -
From: Kathy Lees
To: IMail_Forum@list.ipswitch.com
Sent: Tuesday, August 09, 2005 12:43 PM
Subject: Re: [IMail Forum] How do I stop this spam?
yep. I emailed their support. that should do
Kathy,
Looks like the MyTob virus... Declude
Junkmail with MessageSniffer and/or Declude Virus should be night and day for
you.
http://www.Declude.com.-Chris-Original
Message-From: IMail_Forum@list.ipswitch.comSent:
8/8/2005 12:56 PMTo: IMail_Forum@list.ipswitch.comSubject:
[IMail
I have declue junkmail. How do I get message
sniffer with it?
- Original Message -
From:
Chris Anton
To: IMail_Forum@list.ipswitch.com
Sent: Monday, August 08, 2005 11:01
AM
Subject: RE: [IMail Forum] How do I stop
this spam?
Kathy,
Looks like the MyTob
Buy it at sortmonster.com
Darin.
- Original Message -
From: Kathy Lees
To: IMail_Forum@list.ipswitch.com
Sent: Monday, August 08, 2005 1:05 PM
Subject: Re: [IMail Forum] How do I stop this spam?
I have declue junkmail. How do I get message
sniffer with it?
- Original
25 matches
Mail list logo
