On 2011/03/18 21:05, Karsten Bräckelmann wrote:
On Fri, 2011-03-18 at 20:25 -0700, jdow wrote:
Interesting: (I think you have bigger problems than mere spear-phishing.
1.6 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[64p79p213p206 listed in combined.njabl.org]
0.8 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
[64p79p213p206 listed in dnsbl.sorbs.net]
While that's interesting indeed (and refers to the original sender's IP
address) -- even though I hate to fork yet another sub-thread...
I strongly advise against scanning list mail. Definitely with lists like
this one, where discussing spam is the norm, and samples are, though
frowned upon, to be expected.
Karsten, I assure you I don't. That was the copy he sent to me
straight rather than through SA. I bypass checking at the procmail
level on the setup here for spamassassin groups and a couple other
things.
(I go fairly far back with this stuff. Usually I simply scan for
interesting subjects. I saw this discussion take off and flare so
I stuck my nose in. I'm playing hooky from real work.)
{^_-}
