Re: [Declude.JunkMail] casino spam

[Darrell \([EMAIL PROTECTED])]

Kyle,   On a side note gamestrek . com has been getting caught on SURBL multi for most of the day today.  Doing URI lookup's in the URI RBL's has been very effective for us in catching a lot of the new spam campaigns.   Darrell   ------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. ----- Original Message ----- From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 10:44 PM Subject: RE: [Declude.JunkMail] casino spam So it’s not just me getting it.  I thought maybe it was pay back for not betting enough when I play.   Gamestrek is the biggest one I am seeing.  Thanks for the info didn’t know about British Columbia.   Scott is the MAILFROM-IP.txt filter ok to use since you did all the work?  If it is do I just add the statements you posted   Kyle   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Friday, February 25, 2005 8:43 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] casino spam   gambling, strip clubs, is BC the Nevada of Canada? ----- Original Message ----- From: Matt To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 8:35 PM Subject: Re: [Declude.JunkMail] casino spam   If you do a lookup on ARIN, you will find that this netblock is delegated by BChosting, which is a subdivision of AssertiveNetworks.  All of their IP space is treated as suspect by our system.  You might also note their address...Vancouver, British Columbia...     http://ws.arin.net/cgi-bin/whois.pl?queryinput=66.154.96.0 There is a smattering of legitimate traffic from AssertiveNetworks, but most of what you will see is in fact spam. Matt Scott Fisher wrote: I added this to my ipfile today:   66.154.124.0/29  66.154.124.0/29  gamingpen.com  added 02-25-05   gamingpen, playerjuice and gamestrek all .com.   Also in kind of a spammy neighborhood with several SBL entries near: 66.154.111.0/24  66.154.111.0/24  agooba.com  added 02-17-05 SBL13709 66.154.112.0/24  66.154.112.0/24  erfooble.com  added 02-05-05 SBL20378 66.154.113.0/24  66.154.113.0/24  gambling  added 02-05-05 SBL20539 ----- Original Message ----- From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, February 25, 2005 4:40 PM Subject: [Declude.JunkMail] casino spam   Has anyone noticed in the past week an increase in casino, or party poker, etc.. spam? Kyle -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================