Spam from google photos ?

2012-01-11 Thread Ram
These are the headers http://pastebin.com/udbDgJ8L Seems to have come from google , but is spam. I cant even read the language :)

[OT] RBLs

2012-01-11 Thread --[ UxBoD ]--
Hi, we have seen a recent upsurge in SPAM and would like to ask the community for recommendations on both free and commercial RBL offerings. We are currently using: Barracuda SpamRats JunkEmailFilter SpamEatingMonkey Plus the standard ones that are checked with SpamAssassin. We are also

Re: [OT] RBLs

2012-01-11 Thread Axb
On 2012-01-11 12:28, --[ UxBoD ]-- wrote: Hi, we have seen a recent upsurge in SPAM and would like to ask the community for recommendations on both free and commercial RBL offerings. We are currently using: Barracuda SpamRats JunkEmailFilter SpamEatingMonkey Plus the standard ones that are

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
Am 11.01.2012 12:28, schrieb --[ UxBoD ]--: Hi, we have seen a recent upsurge in SPAM and would like to ask the community for recommendations on both free and commercial RBL offerings. We are currently using: Barracuda SpamRats JunkEmailFilter SpamEatingMonkey never used this Plus

Re: [OT] RBLs

2012-01-11 Thread --[ UxBoD ]--
The type of SPAM we are seeing is where legit companies are having their adverts cloned and the hyperlinks changed to spammy sites. Bayes is being by-passed due to the content looking valid so it is coming down to the IPs and domains. Had one yesterday where at 06:39 it was received by one of

Re: [OT] RBLs

2012-01-11 Thread Simon Loewenthal
On 11/01/12 12:38, Robert Schetterer wrote: Am 11.01.2012 12:28, schrieb --[ UxBoD ]--: Hi, we have seen a recent upsurge in SPAM and would like to ask the community for recommendations on both free and commercial RBL offerings. We are currently using: Barracuda SpamRats JunkEmailFilter

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
Am 11.01.2012 12:57, schrieb --[ UxBoD ]--: The type of SPAM we are seeing is where legit companies are having their adverts cloned and the hyperlinks changed to spammy sites. Bayes is being by-passed due to the content looking valid so it is coming down to the IPs and domains. Had one

Re: [OT] RBLs

2012-01-11 Thread Dave Funk
On Wed, 11 Jan 2012, --[ UxBoD ]-- wrote: The type of SPAM we are seeing is where legit companies are having their adverts cloned and the hyperlinks changed to spammy sites. Bayes is being by-passed due to the content looking valid so it is coming down to the IPs and domains. Had one

Re: [OT] RBLs

2012-01-11 Thread Ken A
On 1/11/2012 11:51 AM, Dave Funk wrote: On Wed, 11 Jan 2012, --[ UxBoD ]-- wrote: The type of SPAM we are seeing is where legit companies are having their adverts cloned and the hyperlinks changed to spammy sites. sanesecurity hits many of these. uri filters can also assist.. surbl, uribl

Re: [OT] RBLs

2012-01-11 Thread David B Funk
On Wed, 11 Jan 2012, Ken A wrote: On 1/11/2012 11:51 AM, Dave Funk wrote: On Wed, 11 Jan 2012, --[ UxBoD ]-- wrote: The type of SPAM we are seeing is where legit companies are having their adverts cloned and the hyperlinks changed to spammy sites. sanesecurity hits many of these. uri

Re: [OT] RBLs

2012-01-11 Thread Rob McEwen
On 1/11/2012 5:10 PM, David B Funk wrote: Problem with all those methods is that they're reactive, will not hit until -after- somebody has seen the bad crap and created filers, RBL-lists, taught Bayes, etc. The OP explicitly said that the first spam run was at 06:39 and by 06:42 it was

Re: [OT] RBLs

2012-01-11 Thread Dave Warren
On 1/11/2012 2:10 PM, David B Funk wrote: Problem with all those methods is that they're reactive, will not hit until -after- somebody has seen the bad crap and created filers, RBL-lists, taught Bayes, etc. The OP explicitly said that the first spam run was at 06:39 and by 06:42 it was

Re: sa-update channel list

2012-01-11 Thread jidanni
MS == Michael Scheidell michael.scheid...@secnap.com writes: MS #1 priority: keep your version of sa updated Hmmm, taking a look at it, I find the last update was about 2011/10/24. Too bad sa-update -D doesn't spit out the date.

Re: sa-update channel list

2012-01-11 Thread Michael Scheidell
On 1/11/12 9:35 PM, jida...@jidanni.org wrote: MS #1 priority: keep your version of sa updated Hmmm, taking a look at it, I find the last update was about 2011/10/24. Too bad sa-update -D doesn't spit out the date. I meant your version of spamassassin. 3.3.2 was updated yesterday. if you

Re: sa-update channel list

2012-01-11 Thread darxus
On 01/12, jida...@jidanni.org wrote: MS == Michael Scheidell michael.scheid...@secnap.com writes: MS #1 priority: keep your version of sa updated Hmmm, taking a look at it, I find the last update was about 2011/10/24. Too bad sa-update -D doesn't spit out the date. I don't remember what

Re: sa-update channel list

2012-01-11 Thread jidanni
MS == Michael Scheidell michael.scheid...@secnap.com writes: MS On 1/11/12 9:35 PM, jida...@jidanni.org wrote: MS #1 priority: keep your version of sa updated MS Hmmm, taking a look at it, I find the last update was about 2011/10/24. MS Too bad sa-update -D doesn't spit out the date.

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
Am 11.01.2012 23:37, schrieb Rob McEwen: On 1/11/2012 5:10 PM, David B Funk wrote: Problem with all those methods is that they're reactive, will not hit until -after- somebody has seen the bad crap and created filers, RBL-lists, taught Bayes, etc. The OP explicitly said that the first spam