Hello Timothy, What I seen is that many of the spammers that use this have a bogus helo. So latest beta with check for bogus helos and possibly a wordfilter to increase weight when HELO CONTAINS $domain this took care of a good chunk of the spams that tried to impersonate one of our users sending to another one of our users. But I also seen strange messages coming from 199.106.236.85 which is mailbits.com. Scott think that might be due to some sweepstake or similar but in a period of 45 minutes I know of at least 3 e-mail messages from one user to another user so almost wonder if there isn't something installed on one of our customers computer that uses mailbits.com.
Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231-7777 Fax : 620-231-4066 - Your Full Time Professionals - eBay UserID : macahan TCB> Basically my biggest priority is stopping the spams that look like they are TCB> sent by my users to my users. TCB> Whats your suggestion? TCB> Thanks TCB> Timothy C. Bohen TCB> CMSInter.Net LLC / Crystal MicroSystems LLC TCB> =========================================== TCB> web : www.cmsinter.net TCB> email : [EMAIL PROTECTED] TCB> phone : 989.235.5100 x222 TCB> fax : 989.235.5151 TCB> -----Original Message----- TCB> From: [EMAIL PROTECTED] TCB> [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry TCB> Sent: Thursday, July 04, 2002 8:39 AM TCB> To: [EMAIL PROTECTED] TCB> Subject: RE: [Declude.JunkMail] I was spammed by myself >>So do I need a the new global.cfg and $defualt$ files, or just the new TCB> .exe? TCB> If you want to take advantage of the new features, you may need to make TCB> some changes to the config files. For example, if you were going to add a TCB> filter, you would need to change the config files. TCB> -Scott TCB> --- TCB> [This E-mail was scanned for viruses by Declude Virus TCB> (http://www.declude.com)] TCB> --- TCB> This E-mail came from the Declude.JunkMail mailing list. To TCB> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and TCB> type "unsubscribe Declude.JunkMail". You can E-mail TCB> [EMAIL PROTECTED] for assistance. You can visit our web TCB> site at http://www.declude.com . TCB> --- TCB> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] TCB> --- TCB> This E-mail came from the Declude.JunkMail mailing list. To TCB> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and TCB> type "unsubscribe Declude.JunkMail". You can E-mail TCB> [EMAIL PROTECTED] for assistance. You can visit our web TCB> site at http://www.declude.com . TCB> --- TCB> [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
