On Mon, 2012-03-12 at 11:56 -0400, Michael D. Sofka wrote: > Richard Laager wrote: > > We've got a customer who is receiving 1 message per second! that > > consists solely of random English words stuck together (both subject and > > body). This has been happening for 24-36 hours. > > > > As far as I can see, it's coming from hijacked accounts all over the > > place (hundreds or thousands of servers) with varying sender addresses. > > > > Is anyone else seeing this sort of thing? > > > > Any idea how I might combat this? > > > > I'd love to bulk submit these messages and report them back to the > > admins of the compromised servers, if that might do some good. > > We just had this happen again. Same MO: ramdom subject and message > body, no links or email addresses in the message, multiple incoming > relays, various recipients, Message-Id starting with "CHILKAT-MID".
I was looking to add that sort of filtering, but it appears we actually have customers sending legitimate mail (purchase orders) with that in the Message-ID. -- Richard
signature.asc
Description: This is a digitally signed message part
_______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
