Until recently I have very little spam getting through
But lately spam like the following pattern get through:
juonte arm mldlgdb zegvq http://fixkweragc.hpage.com b qifdgll. xz, qrxwuf
wtx n.
Is there any way these can be trapped?
Thank you
Please note our new Address
$400 pure profit from the
deal. So a few $10 domain names don't put much of a dent in their profits.
Darin.
- Original Message -
From: "Kim Premuda" <[EMAIL PROTECTED]>
To: "Declude JunkMail Forum" <[EMAIL PROTECTED]>
Sent: Saturday, October 30, 20
-- Original Message --
From: "Sheldon Koehler" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Thu, 28 Oct 2004 12:12:11 -0700
It is obvious they are using "disposable" domain names. They come in flavors like
gbzqrx.info and so on.
Check my logic on this...
For the first rule we would run the external filter DELAYSCANANDDELIVER.
The external .exe checks the sender IP against the database and either
issues exit code 0 (process) 1 (STOPALLTESTS)
If the external .exe doesn't find an IP w/ proper timeset offset in the
database t
On Thursday, October 28, 2004, 5:37:13 PM, Mark wrote:
>> This is a good argument for the delayed-scan-and-deliver
MES> Pete,
MES> That's a great idea but I'm guessing we could do this with an External
MES> program, SQL DB/txt file, and Declude.
MES> Scott,
MES> Check my logic on this...
MES>
On Thursday, October 28, 2004, 3:12:11 PM, Sheldon wrote:
>> This is a good argument for the delayed-scan-and-deliver feature I
>> suggested previously. The porn guys you are probably talking about we
>> call the "mad-lib pornsters". Every day or so they will come out with
>> a brand new set of do
> This is a good argument for the delayed-scan-and-deliver
> feature I suggested previously. The porn guys you are
> probably talking about we call the "mad-lib pornsters". Every
> day or so they will come out with a brand new set of domains
> delivering a wide array of porn traffic.
> Actually, ou
McNeil" <[EMAIL PROTECTED]>
To: "Sheldon Koehler" <[EMAIL PROTECTED]>
Sent: Thursday, October 28, 2004 2:58 PM
Subject: Re[2]: [Declude.JunkMail] Spam getting through
On Thursday, October 28, 2004, 1:29:55 PM, Sheldon wrote:
>>
SK> We have been experiencing th
This is a good argument for the delayed-scan-and-deliver feature I
suggested previously. The porn guys you are probably talking about we
call the "mad-lib pornsters". Every day or so they will come out with
a brand new set of domains delivering a wide array of porn traffic.
Actually, our robots usu
On Thursday, October 28, 2004, 1:49:25 PM, Andrew wrote:
CA> No, I haven't seen this.
CA> But I have meant to ask if others on the list are seeing that their spam
CA> volumes are up in the last week. I have, by a 10% increase. What I'm
CA> seeing is not more spam getting to mailboxes, just more
On Thursday, October 28, 2004, 1:29:55 PM, Sheldon wrote:
>>
SK> We have been experiencing the same thing. The spammers seem to be getting
SK> better at passing filters and probably changing IPs and domains as fast as
SK> they can be listed in the spam databases. We have some really hard core
SK>
stant.
Andrew 8)
-Original Message-
From: Sheldon Koehler [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 9:45 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Spam getting through
Lately we have been seeing a lot of spam getting through passing ALL tests.
We are starting to ge
ay, October 28, 2004 1:49 PM
Subject: RE: [Declude.JunkMail] Spam getting through
No, I haven't seen this.
But I have meant to ask if others on the list are seeing that their spam
volumes are up in the last week. I have, by a 10% increase. What I'm
seeing is not more spam getting to
Andrew 8)
-Original Message-
From: Sheldon Koehler [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 9:45 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Spam getting through
Lately we have been seeing a lot of spam getting through passing ALL tests.
We are starting to get compl
, its up
to you to keep adjusting your filters.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: "Sheldon Koehler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 28, 2004 1:29 PM
Subject: Re: [Declude.
We have been experiencing the same thing. The spammers seem to be getting
better at passing filters and probably changing IPs and domains as fast as
they can be listed in the spam databases. We have some really hard core
coming to a few users and passing all tests including Sniffer.
Most of it is
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Spam getting through
>
> Lately we have been seeing a lot of spam getting through passing ALL
tests.
> We are starting to get complaints from customers on this and I wonder if
we
> are alone in this problem or not. These are a
Fussell
Wilbur Smith Associates
[EMAIL PROTECTED]
803-758-4522
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sheldon Koehler
Sent: Thursday, October 28, 2004 12:45 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Spam getting through
Lately we have been
Lately we have been seeing a lot of spam getting through passing ALL tests.
We are starting to get complaints from customers on this and I wonder if we
are alone in this problem or not. These are all coming in with a weight of
0, no whitelisting or any simple tests are failing (i.e. rDNS).
She
19 matches
Mail list logo
