Ya we went through this yesterday with one of our facilities. It shot its way through 100 machines rather rapidly. Though it is not a virus, it can potentially slow your servers down. We installed an Imail rule on this body text:
---------------------------------------------------------- <Recipient name> (This will always change) Filter on this: I sent you a greeting card. Please pick it up. (I added a space an extra space between the sentences. In reality there is only one.) <Sender name> (This will also change) ---------------------------------------------------------- It appears to work well, as it seems to have thwarted thousands of these from propagation thus far. Dave -----Original Message----- From: R. Scott Perry [mailto:horizons@;declude.com] Sent: Saturday, October 26, 2002 6:27 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Spam Assult >Currently FriendGreetings.com resolves to 65.89.168.4 and >www.FriendGreetings.com resolves to 65.89.168.4. Mail for >FriendGreetings.com is handled by mail.FriendGreetings.com (10) >65.89.168.30. Leske's List can be found at: >http://www.famhost.com/support/files.zip One "gotcha" though -- a lot of the smarter spammers that real domain names will send their spam from different mailservers than the ones in their MX records. That way, their mail will be less likely to be blocked, and you'll have to actually have a sample of the spam before blocking them -- and they can later change the IP address they are spamming from, and be free to send more mail. But it certainly can't hurt to block their MX records if they are known spammers. :) -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
