This morning I got a piece of spam that contained the following lines in it at the bottom. Obviously this was a spam tool gone wrong -- but does anyone see anything useful in this data that could be used to prevent further spam? The dns addresses listed belong ot an outfilt in Florida (why do all the spammers seem to hide in Florida?), and the http address listed belong to a Korean block.

BTW, the '*' in the text were sent that way, I certainly am not hiding any info for the spammer :)

Lines sent were:

Send a few extra outlook headers num_mailer_threads = -1 auto_adjust_threads_factor = 85% num_mailer_threads_max = 8000 proxy_default_to = http message_id_format = 0 proxy_save_periodic = 60 to_field_mode = 3 num_proxy_tries = 10 proxy_err_sleep = 1 no_good_proxy_delay = 5 num_tries = 3 proxy_timeout = 15 connection_timeout = 15 sendmail_timeout = 60 max_to_addr = 2 sent_mail_log = patch3sent.txt failed_mail_log = hpfailed24.txt deferred_mail_log = hpdeferred4.txt ;helo_tag_list { ; nothing here means the email host ;} ;to_addr_list { ; nothing here means first entry in to list ;} email_list { da2sent.txt } dns_list { 66.118.128.2 66.118.128.3 } email_filter = *spam postmaster abuse admin complain @visa @mastercard protection support webmaster fraud *adult *hacker *police *sherif secur root report operator .gov .ru .ua .by .mil @pager.icq.com @compuserve proxy_list = eprox.txt source_domain_list = from.txt resume_file = hpresumne2.log ;randomize_files = yes ;************************** ;*************** ; HTTP Settings ;*************** http_user = admin http_pass = admin2 http_port = 1934 221.167.237.106:35763




------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to