On Wed, 2012-02-08 at 10:03 +0100, Juergen Kleff wrote:
> Do you use greylisting?

Yes.

> Do the mails indeed come from real mailservers or do they come from 
> compromised dial-in computers?

Real mail servers

> Feeding the mails to spamassassin's bayes database could perhaps help, in 
> spite of the random words. But you should keep an eye on it for the risk of 
> false positives.
> 
> Everything in the headers is different? Nothing common in them?

As far as I could tell, nothing was common. They were incredibly
minimal. The X-Mailer field was full of random (real mail client)
values.

-- 
Richard

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to