Scott Fisher wrote:
The Earthlink and Spamarrest filters
are the most annoying. I almost want to reply to them so they get the
original spam
I sometimes do that :)
Matt
--
=
MailPure custom filters for Declude JunkMail Pro.
http
Thanks for the responses.
Since my e-mail account is one of the two being
joe-jobbed, I've got lots of samples to look at...
I'll document how I attacked the problem for the
mailing archive:
The spammer sends out thee subject base64 encoded
(Subject: =?iso-8859-1?B?).
It also will forge t
I use a combo test for this. One test identifies various forms of null
senders (there is more than just <> MAILFROM's due to common
customizations so I also include things like postmaster@,
mailer-daemon@, null@, noreply@, etc.). The other test has an END
statement for TESTSFAILED NOTCONTAINS
There are 3 different type of NDR's caused by joe
jobs.
All 3 are comming back not from spammy servers but from
legit servers bouncing spam messages with wrong recipient addresses. (so far
nothing new)
I've identified the following 3 types
a.) NDR with the part of the original spam mess
