I am seeing ALOT of these german emails here in the US, I just got a bunch of postmaster bounces containing info like this
>>>> Invalid final delivery userid: [EMAIL PROTECTED] **** Command 'invalid' not recognized. >>>> Invalid final delivery userid: [EMAIL PROTECTED] **** Command 'invalid' not recognized. >>>> Invalid final delivery userid: [EMAIL PROTECTED] **** Command 'invalid' not recognized. >>>> Invalid final delivery userid: [EMAIL PROTECTED] **** Command 'invalid' not recognized. >>>> Invalid final delivery userid: [EMAIL PROTECTED] **** Command 'invalid' not recognized. I apparently am blocking some IP space from some of you folks over seas and did not see the email that started this thread orget the filters that were posted. Franco can you send me the filters for this german spam? Thanks! Rick Davidson National Systems Manager North American Title Group - ----- Original Message ----- From: "Franco Celli" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 10, 2004 9:38 AM Subject: RE: [Declude.JunkMail] COMBO-Filter solution for todays german polite emails > Hi, > I'm from Italy, > i receive such messages since past night as far as I can see it is spreading > with a pattern resembling a virus, messages arrived to postmaster, info and > similar mailboxes. I believe it is in effect the payload of a virus. > With the filter you sumbitted I see many messages still arriving to our > users, it seems also the sender is forged as I noticed a copy sent from a > local mailaddress (one of my collegues) but from an incompatible IP. > > BTW thanks for your filters, it would have been difficult to detect in a > foreign language. > > > --------------- > Franco Celli > [EMAIL PROTECTED] > > --- > [Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus] > [Quipo ISP - This E-mail was scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
