Correct. And along those lines, two thoughts come to mind.  

1  Many of your users may see hundreds(maybe thousands) of 
nondeliverable\unknown user bounces.  'Damage control Monday' should be fun 
this week.    

  and

2  For those of you using whitelist from: address or entire @domains in 
Declude(not a best practice but still done often, I'd guess), then your 
spamfilters won't catch a fair chunk of the spam since you might be 
whitelisting your industry specific domains.  Sniffer for instance is catching 
most of these with 060- a fact which rapidly approaches irrelevance if you are 
whitelisting the from: @domain.com of any of your "related industries"

Just a few pre-caffeine random thoughts for a Sunday morning.     



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Nick
Sent: Sunday, May 15, 2005 8:28 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] German political spam


On 15 May 2005 at 10:50, Marc Catuogno wrote:

> I am seeing randomized addresses, but they seem to be from "related
> industries".  We are in real-estate, the address are random then @
> other real-estate companies, title companies, etc.
Good observation - all of the ones I have received have come from 
medical - educational targeting a large physician database we host.

Seems to be a very sophisticated campain - of which at least 90% so 
far are coming from clean domains/clean ip's.  Maybe someone Matt? , 
can figure out some sort of pattern we can target from the spamware?

-Nick
 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to