Re: New www.medsXX.net spam

2009-06-20 Thread John Hardin
On Sat, 20 Jun 2009, Jeremy Morton wrote: John Hardin wrote: D'oh, /me checks pastebins from first message... Also, body rules match cleaned-up text with runs of spaces collapsed, so you don't need to use + or {1,...} Try this: /\(\s?w{2,4}\smeds\d{1,4}\s(?:net|com|org)\s?\)/ Actu

Re: Dealing with backscatter

2009-06-20 Thread Jeremy Morton
Another one, from Lyris ListManager, subject: "re: your email message" These damn mailing lists cause ridiculous backscatter. Can't the admins take a bit more respondibility as to the crap they return to the so-called 'sender'? Best regards, Jeremy Morton (Jez) Jeremy Morton wrote: People

Re: Dealing with backscatter

2009-06-20 Thread Benny Pedersen
On Sat, June 20, 2009 23:01, Jeremy Morton wrote: > 'Your message to Gatewayav-discuss awaits moderator approval' you have verified that the above maillist does check spf ?, or other sensitive forged rejections ? if thats the problem thay do not do this, then problem comes back to you as backsca

Dealing with backscatter

2009-06-20 Thread Jeremy Morton
People who know me by now know that one of my major spam problems is backscatter (and yes, I do consider it spam; it's unsolicited e-mail). A common one that gets past SA is one with a subject like: 'Your message to Gatewayav-discuss awaits moderator approval' Any tips for filtering these out?

Re: Spoofed Email

2009-06-20 Thread Michelle Konzack
Invalid Message-ID: > Message-ID: I use courierfilter to drop such "Message-ID:" and the message will never see my system. Thanks, Greetings and nice Day/Evening Michelle Konzack Systemadministrator 24V Electronic Engineer Tamay Dogan Network Debian GNU/Linux Consultant --

Re: Spoofed Email

2009-06-20 Thread Michelle Konzack
Am 2009-06-18 11:26:29, schrieb Jeff Drury: > SA is working for the most part beyond expectations, the only problem I¹m > having is filtering spoofed email address (i.e. valid_u...@ourdomain.com). I > am able to filter out non-valid user addresses (i.e. spam...@ourdomain.com). WHY DOES YOU

Re: anything usefull to do with a joe-jobed domain?

2009-06-20 Thread RW
On Fri, 19 Jun 2009 13:52:58 +0100 "rich...@buzzhost.co.uk" wrote: > http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation > > Should be possible to make that domain usable again with some work :-) It doesn't solve the whole problem though, it just tells you which of the backscatter mails

interesting phish for yahoo credentials or stupid spammer

2009-06-20 Thread Michael Scheidell
spam, with a url link in it that opens up a yahoo.com web mail page and asks for yahoo.com credentials. don't know how that can help spammer, unless spammer is looking to only get email from yahoo.com users. see line 119 (highighted) http://pastebin.com/m6bb65f86 so, interesting phish or st