On Thu, 2009-08-06 at 10:55 -0400, Charles Gregory wrote: > On Wed, 5 Aug 2009, Chris wrote: > > http://pastebin.com/m5e126ea > > This came to one of my address where what I usually get is 99% spam and > > was scored as ham, no matter what I've done... > > I find it *extremely* rare for a spammer to use their own e-mail address > and server to send their mail. > > So this, plus the whitelisting, leads me to suspect that you've run into a > case where your address has been 'acquired' from some 'public' source, > such as a business directory, and the offending sender has made the > mistake of thinking that it is an open contact/solicitation address. > > Or there may be an illegitimate marketing firm selling lists that they've > culled from 'public' sources, but which they have represented as > 'verified' to buyers. Doubtless webex will pay for their mistake with > reduced whitelisting.... :) > > - C This was sent to a domain I own, toadnet[dot]com. Its never been used on any lists nor at any sites for registration. Though I'd suspect it's the same and my address getting harvested from freenet[dot]de or anywhere else. There is no business involved with my domain. I usually let these slide and just learn and spam, report, and continue on, since this one was not being cooperative thought I'd seek the knowledge of the masses. One thing I did do besides reporting to dnswl and the jmf errors address was run spamassassin -add-address-to-blacklist which gave it a positive score in the 40's range.
-- KeyID 0xE372A7DA98E6705C
signature.asc
Description: This is a digitally signed message part