[Declude.JunkMail] Dealing with SPAM email - Adobe CS4 License

2011-12-07 Thread Ferrell Ard
Today, we started getting a L O T of email with a Subject InDesign CS4 License key # Order 6143 There is a lot of variations to this, but CS4 is common It's comming from MANY IPs. In the \filters\Filter-Subject.txt file, will SUBJECT 20 PCRE (?i:CS4) catch this email? Thanks very much

RE: [Declude.JunkMail] Dealing with SPAM email - Adobe CS4 License

2011-12-07 Thread David Barker
Yes. This will trigger on CS4 in the subject line and score for 20. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com -Original Message- From: Ferrell Ard [mailto:ferr...@badpuppy.com] Sent: Wednesday,

Re: [Declude.JunkMail] Dealing with Joe Jobs?

2011-12-07 Thread Darin Cox
Hi Dave, We see this occasionally, and SPF does help a little, but SPF is often not enforced, so it's more valuable for self-addressed spam than anything else... and many senders violate their own SPF policy. Deleting your MX doesn't help since the bounces are coming from all over, not from the

RE: [Declude.JunkMail] Dealing with Joe Jobs?

2011-12-07 Thread Dave Beckstrom
Hi Darin, Thanks for the reply. The mail server seems to handle the bounces okay as we don't have a catchall address set up. The smtp server connects, gets a no such user here response and disconnects. No mail is actually delivered. At least that is my interpretation (from the log files) as

Re: [Declude.JunkMail] Dealing with Joe Jobs?

2011-12-07 Thread Darin Cox
Ahh... so even the forged FROM addresses are invalid. I see. That's good that it's not forging a valid address, which is what we usually see. On our systems we don't even see the ones bounced back to us to invalid addresses. Darin. - Original Message - From: Dave Beckstrom