[Declude.JunkMail] Increase in porn?
Are any of you seeing an increase in explicit porn getting past Declude and Sniffer in the past few days. We are seeing a disturbing increase that will only fail some minor weighted test such as bad routing and often fail no test. They are almost dynamically changing the spelling of the obvious words we are adding to subject and content filtering. Any suggestions on how to get ahead of these guys and reduce such emails? Woody Fussell Wilbur Smith Associates Columbia SC [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Increase in porn?
Are any of you seeing an increase in explicit porn getting past Declude and Sniffer in the past few days. No. Normaly 5 to 10 messages per month finish in my mailbox. I can't remember one with pornographic content. Any suggestions on how to get ahead of these guys and reduce such emails? What tests are you running? Maybe you've missed some usefull test. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Increase in porn?
On Wednesday, July 21, 2004, 11:27:33 AM, Woody wrote: WGF Are any of you seeing an increase in explicit porn getting past Declude and WGF Sniffer in the past few days. WGF We are seeing a disturbing increase that will only fail some minor weighted WGF test such as bad routing and often fail no test. They are almost dynamically WGF changing the spelling of the obvious words we are adding to subject and WGF content filtering. WGF Any suggestions on how to get ahead of these guys and reduce such emails? We are closing the net on this new guy. He's shooting himself in the foot by mad-libbing his text strings and obfuscating the spelling. Let's just say, he has my undivided attention. Would this be the mega huge shy next door dvd collection guy? _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Increase in porn?
yes a large amount...thought it might just be my config... gb At 11:27 AM 7/21/2004 -0400, you wrote: Are any of you seeing an increase in explicit porn getting past Declude and Sniffer in the past few days. We are seeing a disturbing increase that will only fail some minor weighted test such as bad routing and often fail no test. They are almost dynamically changing the spelling of the obvious words we are adding to subject and content filtering. Any suggestions on how to get ahead of these guys and reduce such emails? Woody Fussell Wilbur Smith Associates Columbia SC [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Glenn Brooks WebWize, Inc. 713-682-7111 http://www.webwize.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Increase in porn?
Yep, usually has to do something with video type stuff. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Wednesday, July 21, 2004 11:30 AM To: Woody G. Fussell Subject: Re: [Declude.JunkMail] Increase in porn? On Wednesday, July 21, 2004, 11:27:33 AM, Woody wrote: WGF Are any of you seeing an increase in explicit porn getting past Declude and WGF Sniffer in the past few days. WGF We are seeing a disturbing increase that will only fail some minor weighted WGF test such as bad routing and often fail no test. They are almost dynamically WGF changing the spelling of the obvious words we are adding to subject and WGF content filtering. WGF Any suggestions on how to get ahead of these guys and reduce such emails? We are closing the net on this new guy. He's shooting himself in the foot by mad-libbing his text strings and obfuscating the spelling. Let's just say, he has my undivided attention. Would this be the mega huge shy next door dvd collection guy? _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Increase in porn?
On Wednesday, July 21, 2004, 11:39:43 AM, Grant wrote: GGDJ We are also seeing these very heavy the past few weeks. I forward them to GGDJ the spam@ for sniffer on a regular basis, but they still seem to get thru on GGDJ a regular basis. No solutions here... I've checked both of your accounts. You are both using the default rule strength settings. Please contact me at [EMAIL PROTECTED] if you would like to explore using a stronger setting. That might help a bit. Thanks, _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Increase in porn?
I have seen an increase in graphic porn that only fails minor tests as well hard to stop that stuff with the crazy misspellings they use Rick Davidson National Systems Manager North American Title Group - - Original Message - From: Glenn Brooks [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, July 21, 2004 12:19 PM Subject: Re: [Declude.JunkMail] Increase in porn? yes a large amount...thought it might just be my config... gb At 11:27 AM 7/21/2004 -0400, you wrote: Are any of you seeing an increase in explicit porn getting past Declude and Sniffer in the past few days. We are seeing a disturbing increase that will only fail some minor weighted test such as bad routing and often fail no test. They are almost dynamically changing the spelling of the obvious words we are adding to subject and content filtering. Any suggestions on how to get ahead of these guys and reduce such emails? Woody Fussell Wilbur Smith Associates Columbia SC [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Glenn Brooks WebWize, Inc. 713-682-7111 http://www.webwize.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Increase in porn?
On Wednesday, July 21, 2004, 12:27:00 PM, Grant wrote: GGDJ Yep, usually has to do something with video type stuff. The good news is that in the last two rounds of updates I've done I saw no more of this guys trash - so I think we've put a hurtin' on him. The bad news is that he is probably the most prolific porn spammer we've seen in a long time and he's likely to come up with something new pretty soon. BUT - I am ready for that. We are running rapid update cycles and I've just about prepared a set of generalized heuristics that will capture what I estimate to be 80+ percent of his possible variations based on the mix of text tokens and URL formats that I've seen so far. The only reason this isn't in place yet is that I want to be sure about the rules because job 1 is: NO FALSE POSITIVES and generalized heuristics carry some risks and require some extra care. _M (I believe that this is one or more of the ROKSO spammers, but the content is coming in through as-yet untagged IPs quite often.) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Increase in porn?
I filter on the picture name and url in the mail. Then I route the img source address to a null route so the customer will not see the image. Just the holder in the message. It helps on alot of these type of messages that have gotten thru. Robert -- Original Message -- From: Pete McNeil [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 21 Jul 2004 12:35:25 -0400 On Wednesday, July 21, 2004, 11:39:43 AM, Grant wrote: GGDJ We are also seeing these very heavy the past few weeks. I forward them to GGDJ the spam@ for sniffer on a regular basis, but they still seem to get thru on GGDJ a regular basis. No solutions here... I've checked both of your accounts. You are both using the default rule strength settings. Please contact me at [EMAIL PROTECTED] if you would like to explore using a stronger setting. That might help a bit. Thanks, _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
