On 2014-01-24 01:04, David B Funk wrote:
Dave Funk gave you a better suggestion: whitelist authenticated
vodaphone emails and create some aggressive rules to catch the fakes.
More to the point; create aggressive rules to catch -any- message that
claims to be a vodafone bill (real or fake) and
On Thu, 23 Jan 2014, RW wrote:
On Tue, 21 Jan 2014 09:50:13 +0100
Michael Monnerie wrote:
Am 20.01.2014 09:54, schrieb Michael Monnerie:
That should not matter. I want to say "if there is a bill claiming
to be from vodafone, then there MUST NOT be any link to anything
else than https?://vodaf
On Tue, 21 Jan 2014 09:50:13 +0100
Michael Monnerie wrote:
> Am 20.01.2014 09:54, schrieb Michael Monnerie:
> > That should not matter. I want to say "if there is a bill claiming
> > to be from vodafone, then there MUST NOT be any link to anything
> > else than https?://vodafone.de". Any idea how
Am 20.01.2014 09:54, schrieb Michael Monnerie:
That should not matter. I want to say "if there is a bill claiming to
be from vodafone, then there MUST NOT be any link to anything else
than https?://vodafone.de". Any idea how I could check for this?
Is this possible?
So I want to catch a rea
Am 20.01.2014 16:51, schrieb Starckjohann, Ove:
I added a rule detecting "Blat.v3" inside the MESSAGEID header.
Gave "only" 2 FPs from the last matching 204 Mails at our side - 202 were spam.
Ove
And the Content-Type boundary name contains ZG_static_sub_1 so far,
--
mit freundlichen Grüssen,
, 20. Januar 2014 09:54
An: users@spamassassin.apache.org
Betreff: Re: tons of forged bills in german
Am 18.01.2014 15:27, schrieb Axb:
>
> pastebin samples ?
>
Here are two, from Deutsche Telekom and Vodafone:
http://pastebin.com/M3aTrdDx
http://pastebin.com/i0kfjG8s
Am 18.01.2014 19:02, schrieb Benny Pedersen:
They look like the original, and just the link in the middle, where it
says "download your bill here", goes to a site containing trojans.
+1
i have seen some that contain a html attachment, this is now blocked
in my own clamav rule
Problem is, t
Am 18.01.2014 15:27, schrieb Axb:
pastebin samples ?
Here are two, from Deutsche Telekom and Vodafone:
http://pastebin.com/M3aTrdDx
http://pastebin.com/i0kfjG8s
On Sat, 2014-01-18 at 16:59 +, haman...@t-online.de wrote:
>
> From a differnt point of view ... these are big companies capable of running
> their own
> mail servers (rather than relying on outside service companies to send out
> the mails)
> I am customer of one of these companies, and I
On 2014-01-18 15:01, Michael Monnerie wrote:
Dear list, since this week there are tons of very good forged bills
that look like real, from big companies like telekom, vodafone, etc.
+1
They look like the original, and just the link in the middle, where it
says "download your bill here", goes
On Sat, 18 Jan 2014, Michael Monnerie wrote:
Dear list, since this week there are tons of very good forged bills that look
like real, from big companies like telekom, vodafone, etc. They look like the
original, and just the link in the middle, where it says "download your bill
here", goes to a
>> Michael Monnerie wrote:
>> > Dear list, since this week there are tons of very good forged bills
>> > that look like real, from big companies like telekom, vodafone, etc.
>> > They look like the original, and just the link in the middle, where it
>> > says "download your bill here", goes to a si
Michael Monnerie wrote:
Dear list, since this week there are tons of very good forged bills
that look like real, from big companies like telekom, vodafone, etc.
They look like the original, and just the link in the middle, where it
says "download your bill here", goes to a site containing trojans
On 01/18/2014 03:01 PM, Michael Monnerie wrote:
So I want to catch a real-looking vodafone bill that has any URI to
another domain. Also, as Vodafone uses SPF, I'd like to check if I hit
VODAFONEgood && !SPF signature in the mail.
The problem with all this is, that there are MANY companies, so d
Dear list, since this week there are tons of very good forged bills that
look like real, from big companies like telekom, vodafone, etc. They
look like the original, and just the link in the middle, where it says
"download your bill here", goes to a site containing trojans.
I'd like to write r
15 matches
Mail list logo
