Prev: Simple Hack To Get $2000 To Your PayPal Account.
Next: THREAD DEAD [Was: Postfix.org SPF]
From: Josh Cason on 6 Jul 2010 16:10
I have now went through my config so I will post it if needed. What
I'm facing now is spam that looks normal. Looks like a reject but is
not in some cases. The problem is that since these e-mails are
delivered to the user account. I really don't have an example to post
from the q. I use postini, mailscanner, that uses clamav and
spamassasian. That does a good job but I still get spam through. Even
on top of using outlook 2003 / 2007 spam filter. The current small
batch of say 5 messages looked like rejects. Sure I can look at the
header and see what server they are comming from. In fact some of the
messages are from postmaster at whatever server. But it does not
matter. This spam slips through and I'm told about it. I cannot tell
them to black list the address since it keeps changing. I think I need
a better spam filter or to change some settings. But how do you kill
mail that looks normal?

(I think I asked this before. So plz forgive me if I did. Perhaps this
plea for help for have some new ideas)

Josh


--
This message has been scanned for viruses and
dangerous content by Mychoice, and is
believed to be clean.

From: Phil Howard on 6 Jul 2010 16:16
On Tue, Jul 6, 2010 at 16:10, Josh Cason <jocaso(a)mychoice.cc> wrote:
> I have now went through my config so I will post it if needed. What I'm
> facing now is spam that looks normal. Looks like a reject but is not in some
> cases. The problem is that since these e-mails are delivered to the user
> account. I really don't have an example to post from the q. I use postini,
> mailscanner, that uses clamav and spamassasian. That does a good job but I
> still get spam through. Even on top of using outlook 2003 / 2007 spam
> filter. The current small batch of say 5 messages looked like rejects. Sure
> I can look at the header and see what server they are comming from. In fact
> some of the messages are from postmaster at whatever server. But it does not
> matter. This spam slips through and I'm told about it. I cannot tell them to
> black list the address since it keeps changing. I think I need a better spam
> filter or to change some settings. But how do you kill mail that looks
> normal?

Are these so normal that they don't even look alike? I can't imagine
humans writing decent message content on spammer scales, so they must
have some better AI these days (probably using the same anti-spam
filters to train their own spam generators).

--
sHiFt HaPpEnS!

From: Josh Cason on 6 Jul 2010 17:51
No the message is different. Like this time around they look like this:

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

authentically3(a)raisley.com

Final-Recipient: rfc958;authentically3(a)raisley.com
Action: failed
Status: 1.2.0


I prefer not keeping a long list of block. I would like to stop this
garbage before it gets to me. The domain and mail address changes
though.

Josh


--
This message has been scanned for viruses and
dangerous content by Mychoice, and is
believed to be clean.

From: Noel Jones on 6 Jul 2010 17:54
On 7/6/2010 4:51 PM, Josh Cason wrote:
> No the message is different. Like this time around they look
> like this:
>
> This is an automatically generated Delivery Status Notification.
>
> Delivery to the following recipients failed.
>
> authentically3(a)raisley.com
>
> Final-Recipient: rfc958;authentically3(a)raisley.com
> Action: failed
> Status: 1.2.0
>
>
> I prefer not keeping a long list of block. I would like to
> stop this garbage before it gets to me. The domain and mail
> address changes though.
>
> Josh
>
>

Start here:
http://www.postfix.org/BACKSCATTER_README.html

And read up on the VBounce rules in SpamAssassin. Since
you're using an outside mail filtering service, RBLs won't help.

From: mouss on 6 Jul 2010 18:55
Josh Cason a �crit :
> I have now went through my config so I will post it if needed. What I'm
> facing now is spam that looks normal. Looks like a reject but is not in
> some cases. The problem is that since these e-mails are delivered to the
> user account. I really don't have an example to post from the q. I use
> postini, mailscanner, that uses clamav and spamassasian. That does a
> good job but I still get spam through. Even on top of using outlook 2003
> / 2007 spam filter. The current small batch of say 5 messages looked
> like rejects. Sure I can look at the header and see what server they are
> comming from. In fact some of the messages are from postmaster at
> whatever server. But it does not matter. This spam slips through and I'm
> told about it. I cannot tell them to black list the address since it
> keeps changing. I think I need a better spam filter or to change some
> settings. But how do you kill mail that looks normal?
>
> (I think I asked this before. So plz forgive me if I did. Perhaps this
> plea for help for have some new ideas)
>

so you're using postini but still have a spam problem? hmmm. do you
accept mail from anything but postini servers? if so, why? ... please
give a detailed explanation of your setup, and show your configuration
(postconf -n).

 |  Next  |  Last
Pages: 1 2
Prev: Simple Hack To Get $2000 To Your PayPal Account.
Next: THREAD DEAD [Was: Postfix.org SPF]