Markus, I have noticed that most of these messages at the start of this campaign were getting caught on SURBL using invURIBL. Do you know anything about that domain listed below?
2005-05-15 00:19:19.890 2005-05-15 00:19:19.968 E:\IMAIL\SPOOL\DCDC4C1BB006E894A.SMD libasoli.de 127.0.0.2 on multi.surbl.org [2] [Total Weight=7] Darrell ------------------------------------------- invURIBL - Intelligent URI Filtering. Stops 85%+ SPAM with the default configuration. Download a copy today - http://www.invariantsystems.com ----- Original Message ----- From: "Markus Gufler" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Sunday, May 15, 2005 3:37 AM Subject: RE: [Declude.JunkMail] German political spam > > Anyone else getting hit with massive waves of German spam as > > a byproduct of modified Sober code continuing from around 2 > > pm EDT today, or am I 'unique' in this? > > Update: > I've noted that this type of messages always will fail CMDSPACE > > Please take care that the links that are part of the message body does not > have to do anything with the initiator(s) of this messages. > > For example > www.heise.de is an important german computer magazine and always strive for > announcing security risk, spam tecniques and so on. > www.spiegel.de is a big german magazine and I'm 100% sure that it has > nothing to do with this type of spam. > > Largely blocking this URI's in Blacklists maybe it's exactly what this > spammers want. > > Markus > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
