Giampaolo Tomassoni wrote:
> Dears,
>
> some time ago (in nov. 2004, I guess) I registered with Razor2 a server of
> mines in order to report spam.
>
> I could easily see that whatever piece of spam I was reporting, was soon
> reported as spam by a further check on the very same message.
>
> Recently, I see that my reportings are basicly ignored.
>
> I there any policy change in this matter, or is due to some misconfiguration
> on my side?
If you were seeing the message detected after your report before, it wasn't just
because of your report. Several others were reporting the same message. From
what I understand of Razor's TeS, most folks won't be able to cause a listing
alone, only when they report the same message as others do.
Are the spams you're doing this with some of the current image spams?
Unfortunately, right now the latest batch of 'image spam' seems to be one-off
images. ie: each and every message appears to have a slightly different image in
it. It looks the same, because the text is the same, but the "noise dots" are
different in each, and sometimes the font size is different.
So, with these, if you report the message, nobody else got the same one, and
nobody else ever will. It won't be likely to ever be listed by Razor e4, because
there won't ever be another matching report.
Even if it did get listed, it wouldn't matter. Nobody will ever get the exact
same one again.
For example, today I got two pump-and-dump stock spams using images that
advertise the same stock. Both quote the same stock, and contain the same text.
Fri, 27 Oct 2006 05:13:14 (source IP in Brazil)
Fri, 27 Oct 2006 13:14:35 (source IP in Korea)
They have the same content, and at casual glance look like the same spam. except
the second one:
Uses a brighter shade of red and blue.
Wraps text at 65 chars, instead of 84 like the first one.
Has 11 "noise dots". The previous had 4, and in different spots.
Slightly larger font size (looks like 13 vs 12)
Based on that, it appears the spammer is sending HTML text to his spam bots,
which are then rendering it into a .gif file with random text wrap, text
brightness, font and noise addition on a per-message basis.
And of course the text sections are just random garbage text.
The resulting e4's for these two are considerably different:
mail 1.0 e=4 sig=VpgaCP1ckRAjtAuuhZ2ia5fPKXAA: sig not found.
mail 1.1 e=4 sig=UEw4IneemYPoU2uZB8HfKiaS3TQA: sig not found.
mail 1.0 e=4 sig=MhrDCycVM0QFIgeiVdIKoD2_AcsA: sig not found.
mail 1.1 e=4 sig=SG1ATI4oeTm6vCqwJvuagP9EVeUA: sig not found.
Despite the fact that they look the same.
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
