Hi Matt, Thanks very much for your digging. This last one seems to be the real trouble. :)
I hope Cloudmark crew can read this message and can give us (or at least me, privately) a confirmation that they have taken some action. Otherwise I'll try to contact them in some days. Thanks a lot also to Santiago Vila, Daniel McDonald and Dörfler Andreas, everyone has been really helpful here :) Kind regards El mar, 25-01-2005 a las 19:15, Matt Kettler escribió: > At 11:55 AM 1/25/2005, Eneko Lacunza wrote: > > So the only possibility is that "some" real Razor users revoke when > >Razor marks as spam messages by my and my workmates. :) But for that > >they first must notice the problem. > > Doing some more digging, it looks like the most recent problem is a wave of > nigerian spam sent through a server (smtp.latinmail.com) that appends a > "scanned by" link to your site: > > http://groups-beta.google.com/group/news.admin.net-abuse.sightings/search?q=www.pandasoftware.es&start=0&scoring=d&; > > In particular, the Nigerian spams end in: > ----- > ¡Sé listo! Contrata el antivirus > <http://www.pandasoftware.es/tienda/?idpers=109&track=13920>http://www.pandasoftware.es<http://www.pandasoftware.es/tienda/?idpers=109&track=13920>/tienda/?idpers=109&track=13920 > > > ----- > > You might want to contact Vipul, or the other Cloudmark folks, if they > don't reply to this post of mine, and tell them you are an anti-virus > vendor, and that URLs to your site are often included in emails generated > by systems outside your control. > > In theory they should be able to deal with this, as a lot of AV and > anti-spam systems do this kind of thing. Clearly whiplash would have > serious issues if it did not whitelist links to such sites, as it would end > up blacklisting all users of said AV products as soon as any one of them in > the world got abused as a relay. > > I know SURBL (a DNS based URL blacklist) has faced the very same kind of > problem, and has implemented server-side whitelisting to prevent such > "common footer" domains from getting listed. I'd suspect Cloudmark has done > the same, as they are in general very smart folks. > -- Eneko Lacunza O.D.E. Office Panda Software - Bilbao (Spain) - http://www.pandasoftware.es ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Razor-users mailing list Razor-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/razor-users
