listserve bombs: questex.com and civisplus.com - anyone?

2008-02-26 Thread Toll, Eric
Anyone else just get bombed by listserve servers? I got a user who got 20 emails in 5 mins from: questex.com 66.203.94.0/24 and civicplus.com 69.149.139.127 almost feels like zombie worms or something is subscribing users to these listserv servers -- which either do not require a confirm email

RE: Ideas

2006-10-10 Thread Toll, Eric
So, what is so hard about that? Just setup a server with SA, then $sa_tag_level_deflt  = -100.0;  Then pop out your emails to yourself.       From: Robert Swan [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 10, 2006 4:32 PMTo: SpamAssassin UsersSubject: RE: Ideas OM

no network tests

2006-10-10 Thread Toll, Eric
hello list: I just set up a box who is: FreeBSD 6.1 Perl 5.8.7 Spamassassin 3.1.6 and when I: spamassassin -D --lint, I get the following: [67350] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC [67350] dbg: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x

header attached

2006-09-26 Thread Toll, Eric
Greetings list, I have: SpamAssassin version 3.1.5 running on Perl version 5.8.3 And would like the header to be "inline" instead of an attachment (like it used to be with older versions of SA) E.g. When I have the notification emails sent to me when a spam is placed in quarantine, I want t

RE: Was "One large image" now is "several small images"

2006-06-19 Thread Toll, Eric
> -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED] > > On Thu, 15 Jun 2006, Matt wrote: > > > It seems the spammers have gotten smart to the fact that we were > > filtering for one large image and no text... now what I am > seeing is > > that the spammers are sending

RE: Whoa! 258.0 points score

2005-06-14 Thread Toll, Eric
> Subject: RE: Whoa! 258.0 points score > > > Take a look. I think this is the highest I've seen in a > while. Fraud > > is a terrible thing. > > Then when you realize that 214 points are due to SARE forged > ebay rules, it's not quite as impressive. > > Bret > You can call me easily amuse

Whoa! 258.0 points score

2005-06-14 Thread Toll, Eric
Take a look. I think this is the highest I've seen in a while. Fraud is a terrible thing. The message has been quarantined as: spam-bJacn2m5vocT.gz SpamAssassin report: Spam detection software, running on the system "rodan.vipstructures.com", has identified this incoming email as possible spa

Interesting? Porn Spam

2005-03-22 Thread Toll, Eric
Hello List, I am running SA 2.63, Posfix 2 & Amavisd-new. I have many updated rule sets, any rules out there to "see" letters spelled as below? The following spam got in, just thought I'd share with the list, I have never seen this technique. My tagged above is set to -100 so I can see the tests

RE: Spammer using my domain name in FROM field

2004-09-13 Thread Toll, Eric
> -Original Message- > From: p dont think [mailto:[EMAIL PROTECTED] > Sent: Monday, September 13, 2004 2:09 PM > To: Toll, Eric > Cc: Robert Menschel; Predrag Lezaic; users@spamassassin.apache.org > Subject: Re: Spammer using my domain name in FROM field &g

RE: Spammer using my domain name in FROM field

2004-09-13 Thread Toll, Eric
> -Original Message- > From: Robert Menschel [mailto:[EMAIL PROTECTED] > Sent: Sunday, September 12, 2004 1:08 AM > To: Predrag Lezaic > Cc: users@spamassassin.apache.org > Subject: Re: Spammer using my domain name in FROM field > > Hello Predrag, > > Saturday, September 11, 2004, 9:4