Tonight our site is being bombarded by German political spam or Joe-jobbed bounce fall-out. So far it appears to all be coming from trojaned PCs. Other than the specific URLs in the messages havn't found any easily identified parts to create rules for.
anybody else seeing this?
Lots and lots. Around 10AM CDT, it seems that the various RBL and URI rules are starting to kick in, but some is still leaking through as with low scores.
I received about 500 on the webmaster account.
Now we know what "sober" was all about.
--
Steve
