jdow wrote:
From: "jdow" <[EMAIL PROTECTED]>
postini.com is spewing an image spam that is getting through filters.
Worse yet they are using acm.org as a relay!!!!
More specifically the first one of these spams I received was from
a Brazillian address. The next two, of a set of three, were relayed
through LISTSERV.ACM.ORG on two different lists from
exprod7mx82.postini.com - WITH "Approved-By: [EMAIL PROTECTED]". Postini
received it via SSL:
Received: from source ([63.118.7.109]) (using SSLv3) by
exprod7mx82.postini.com
([64.18.6.14]) with SMTP; Mon, 31 Jul 2006 01:48:23 EDT
The source to postini appears to be a <gisp> comcast address in one
case and nucleus.com for the second of the two relayed through ACM.
Is postini even remotely legitimate?
{^_^}
Postini does process a huge amount of incoming and outgoing mail, and
unless they are able to identify the spam, they will forward it, just
like anyone else. :-\
These image spams are not easy to stop. I'm finally getting them with a
'full' rule matching a string that is common in the base64 encoded image
part. I'm sure the image will change friday and break my rule for next
weekend though.
Ken
Pacific.Net
