worried you are about FPs)
which hits BOTNET. Give this meta rule a score of 5 or more.
Thats how I would handle it (if my current config wern't already catching
all these emails).
--
View this message in context:
http://www.nabble.com/How-to-block-the-bat%21-tf4644470.html#a13362545
Sent fro
Am 2007-10-17 22:08:53, schrieb cpayne:
> Guys,
>
> I am getting a lot mail which I know is from a mail program use by
> spammers, called the bat.
>
> I like to know how can I write a rule to give lets say two or three
> points for this in the header.
>
> X-Mailer: The Bat! (v2.00.6) Educatio
Robert Braver schrieb:
Hello Payne,
On Wednesday, October 17, 2007, 9:43:25 PM, you wrote:
c> spam I am using is coming from the mail program.
c> http://www.ritlabs.com/en/products/thebat/
Just to be clear, I doubt highly that the spam you are seeing is
coming from an actual copy of The Bat.
Quoting Matt Kettler <[EMAIL PROTECTED]>:
> cpayne wrote:
> > Robert Braver wrote:
> >> Hello Payne,
> >>
> >> On Wednesday, October 17, 2007, 9:08:53 PM, you wrote:
> >>
> >> c> I am getting a lot mail which I know is from a mail program use by
> >> c> spammers, called the bat.
> >>
> >>
> > Yea
But no spammer is going to be foolish enough to put:
User-Agent: Storm Worm Botnet v 3.12.0
Well, that sort of thing did happen in the early days of spamming, when the
spam tool used would advertise itself. I never figured out who the intended
audience was. I suppose the assumption was that
cpayne wrote:
> Robert Braver wrote:
>> Hello Payne,
>>
>> On Wednesday, October 17, 2007, 9:08:53 PM, you wrote:
>>
>> c> I am getting a lot mail which I know is from a mail program use by
>> c> spammers, called the bat.
>>
>>
> Yea, I did a search. And found you are right, shame that most of t
Hello Payne,
On Wednesday, October 17, 2007, 9:43:25 PM, you wrote:
c> spam I am using is coming from the mail program.
c> http://www.ritlabs.com/en/products/thebat/
Just to be clear, I doubt highly that the spam you are seeing is
coming from an actual copy of The Bat.
Spamassassin will tag an
Robert Braver wrote:
Hello Payne,
On Wednesday, October 17, 2007, 9:08:53 PM, you wrote:
c> I am getting a lot mail which I know is from a mail program use by
c> spammers, called the bat.
This comes up on the list from time to time.
No, The Bat is a legitimate email client (such as Outlook
Hello Payne,
On Wednesday, October 17, 2007, 9:08:53 PM, you wrote:
c> I am getting a lot mail which I know is from a mail program use by
c> spammers, called the bat.
This comes up on the list from time to time.
No, The Bat is a legitimate email client (such as Outlook and
Eudora) which, like
Guys,
I am getting a lot mail which I know is from a mail program use by
spammers, called the bat.
I like to know how can I write a rule to give lets say two or three
points for this in the header.
X-Mailer: The Bat! (v2.00.6) Educational
Thanks for any help you can give me.
Payne
10 matches
Mail list logo
