Re: Constant .info domain spam

2010-10-14 Thread Jason Bertoch
On 2:59 PM, Julian Yap wrote: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some constant spamming from dot info domains. Perhaps for the past 2 months or so. Often they send hundreds per day

Re: Constant .info domain spam

2010-10-14 Thread Jason Bertoch
On 10/14/2010 8:26 PM, Julian Yap wrote: On Thu, Oct 14, 2010 at 4:24 AM, Jason Bertochja...@i6ix.com wrote: On 2:59 PM, Julian Yap wrote: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some

Re: Constant .info domain spam

2010-10-13 Thread Michelle Konzack
Hello Julian Yap, Am 2010-10-12 10:32:39, hacktest Du folgendes herunter: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some constant spamming from dot info domains. Perhaps for the past 2

Constant .info domain spam

2010-10-12 Thread Julian Yap
NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some constant spamming from dot info domains. Perhaps for the past 2 months or so. Often they send hundreds per day and consistently from the same

Re: Constant .info domain spam

2010-10-12 Thread Karsten Bräckelmann
On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some constant spamming from dot info domains. Perhaps for the past 2 months or so. Often

RE: Constant .info domain spam

2010-10-12 Thread Peter Lowish
: Karsten Bräckelmann [mailto:guent...@rudersport.de] Sent: Wednesday, 13 October 2010 10:05 a.m. To: users@spamassassin.apache.org Subject: Re: Constant .info domain spam On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my

Re: Constant .info domain spam

2010-10-12 Thread Karsten Bräckelmann
. -Original Message- From: Karsten Bräckelmann [mailto:guent...@rudersport.de] Sent: Wednesday, 13 October 2010 10:05 a.m. To: users@spamassassin.apache.org Subject: Re: Constant .info domain spam On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: NOTE: I changed the domains

RE: Constant .info domain spam

2010-10-12 Thread Peter Lowish
I confirm that on revisiting, RCVD_IN_* rules are implemented - thanks for your help Peter -Original Message- From: Karsten Bräckelmann [mailto:guent...@rudersport.de] Sent: Wednesday, 13 October 2010 11:41 a.m. To: users@spamassassin.apache.org Subject: Re: Constant .info domain spam

Re: Constant .info domain spam

2010-10-12 Thread Julian Yap
2010/10/12 Karsten Bräckelmann guent...@rudersport.de: On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: NOTE: I changed the domains below to 'dot info' as the mailing list rejected my initial submission. I'm pretty sure it's not just me but there is some constant spamming from  dot info

RE: Constant .info domain spam

2010-10-12 Thread Karsten Bräckelmann
@spamassassin.apache.org Subject: Re: Constant .info domain spam On Wed, 2010-10-13 at 11:16 +1300, Peter Lowish wrote: How are RCVD_IN_* rules implemented Karsten? They are generally DNS BL checks, some of which do (and are safe for) deep header parsing. Most of them are checked against

Re: Constant .info domain spam

2010-10-12 Thread Karsten Bräckelmann
On Tue, 2010-10-12 at 14:03 -1000, Julian Yap wrote: 2010/10/12 Karsten Bräckelmann guent...@rudersport.de: On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: Doh! Upon re-reading, I just realized that you are the OP of this thread, not Peter. So, please, Julian, think of most (if not all)

Re: Constant .info domain spam

2010-10-12 Thread Julian Yap
2010/10/12 Karsten Bräckelmann guent...@rudersport.de: On Tue, 2010-10-12 at 14:03 -1000, Julian Yap wrote: 2010/10/12 Karsten Bräckelmann guent...@rudersport.de: On Tue, 2010-10-12 at 10:32 -1000, Julian Yap wrote: Are people using automated IP blacklists or something like that? Yes.

Re: Constant .info domain spam

2010-10-12 Thread Karsten Bräckelmann
On Tue, 2010-10-12 at 14:22 -1000, Julian Yap wrote: 2010/10/12 Karsten Bräckelmann guent...@rudersport.de: On Tue, 2010-10-12 at 14:03 -1000, Julian Yap wrote: Many of the don't trigger the RCVD_IN_* rules. Does anyone implement their own private DNS black list? Many of what? Many

Re: Constant .info domain spam

2010-10-12 Thread Rob McEwen
On 10/12/2010 8:14 PM, Karsten Bräckelmann wrote: [Added after re-reading: Same request. Which ones do hit, optionaly which ones don't?] For the IPs mentioned: 217.23.6.209 204.45.150.196 64.32.6.4 173.234.224.131 184.107.29.11 72.55.165.139 67.159.50.131 174.37.134.225 ...here is a tally of