Re: [sa-list] Re: Spammers Bypassing Whitelists / Rule Suggestion / Performance

2004-09-16 Thread Dan Mahoney, System Admin
On Thu, 16 Sep 2004, Stewart Nelson wrote: Turn this around and make a rule for it. I have one and it works great. FROM_ME_TO_ME. The description says, "Why the hell would I get email from myself, from outside!" Well, I often send myself email, usually to store some (important to me but not sensiti

Re: Spammers Bypassing Whitelists / Rule Suggestion / Performance

2004-09-16 Thread Stewart Nelson
Turn this around and make a rule for it. I have one and it works great. FROM_ME_TO_ME. The description says, "Why the hell would I get email from myself, from outside!" Well, I often send myself email, usually to store some (important to me but not sensitive) information so it can be accessed from

RE: Spammers Bypassing Whitelists

2004-09-15 Thread Chris Santerre
>-Original Message- >From: Dan Mahoney, System Admin [mailto:[EMAIL PROTECTED] >Sent: Wednesday, September 15, 2004 4:06 PM >To: [EMAIL PROTECTED] >Subject: Spammers Bypassing Whitelists > > >I'm seeing spammers bypass whitelists by appending a few >cha

Re: Spammers Bypassing Whitelists

2004-09-15 Thread Matt Kettler
At 04:05 PM 9/15/2004, Dan Mahoney, System Admin wrote: I'm seeing spammers bypass whitelists by appending a few characters to my own username and using it as their own. Rule #1.. Never whitelist_from your own domain.. It doesn't work. Spammers always forge From: addresses and frequently forge yo

Re: Spammers Bypassing Whitelists

2004-09-15 Thread Evan Platt
At 01:05 PM 9/15/2004, you wrote: I'm seeing spammers bypass whitelists by appending a few characters to my own username and using it as their own. I'm confused. What address is whitelested (from? to?) and who is receiving the spam? Are they sending say other users on your system spam, and your

Spammers Bypassing Whitelists

2004-09-15 Thread Dan Mahoney, System Admin
I'm seeing spammers bypass whitelists by appending a few characters to my own username and using it as their own. -- "This Is Not Goodbye!" -DM, August 11th 2001, 10 PMish Chicago Time Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM