There have been a lot reported today. It started for us about 8:30am.
We use Declude and added a filter to catch messages with subjects starting
with Emailing:, ending with .pdf and having a body containing The
message is ready to be sent with the following file or link. This
combination may result in false positives, but has not for us today. The
headers appear too varied to identify anything in them for use in the
filtering process.
Darin.
- Original Message -
From: [EMAIL PROTECTED]
To: Message Sniffer Community sniffer@sortmonster.com
Sent: Wednesday, July 18, 2007 3:38 PM
Subject: [sniffer] July 18
Not sure what is up but I'm seeing lots of messages getting through
to my primary folder since yesterday. Lots of .pdf
attachments - Just checked and 10/11 were spam messages in my inbox.
Thanks, Greg
CoffeyNet/AllureTech v 307-473-2323
1546 E. Burlington cell 307-259-7962
Casper, WY 82601 fax 307-237-3709
#
This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to [EMAIL PROTECTED]
#
This message is sent to you because you are subscribed to
the mailing list sniffer@sortmonster.com.
To unsubscribe, E-mail to: [EMAIL PROTECTED]
To switch to the DIGEST mode, E-mail to [EMAIL PROTECTED]
To switch to the INDEX mode, E-mail to [EMAIL PROTECTED]
Send administrative queries to [EMAIL PROTECTED]