Re: Website "help" spams

2021-07-28 Thread Loren Wilton

body NOT_INTERESTED=~ /“[Nn]ot\S{1,5}[Ii]nterested\.?â€/

Might also be an interesting test. I assume the gibberish on the front and 
back is quotes in some character set or another, but they seem a little 
unlikely in a real mail.


   Loren


---
This email has been checked for viruses by AVG.
https://www.avg.com



Re: Website "help" spams

2021-07-28 Thread John Hardin

On Thu, 29 Jul 2021, Robert S wrote:


I am getting deluged with emails coming from semi-legitimate looking
sources offering to "improve" my website, which is hosted with the
same domain name as my email address (example below). Does anybody
have a rule that helps to increase the spam score of these, or any
other tips?  My email address isn't on the website.  The message below
got a score of 4.6 (5 required to be marked as spam).




Thanks & Regards,
Nikita Bee– SEO Manager


"SEO Manager" seems a good indicator.

  body  SEO_SOMETHING /\bSEO (?:[Mm]anager|[Aa]dvisor|[Cc]onsultant)/

Intentionally *not* case-insensitive.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.org pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Britain used to be the most powerful empire in the world.
  Now they're terrified of pocketknives.
  How the mighty have fallen.   -- Matt Walsh
---
 7 days until the 286th anniversary of John Peter Zenger's acquittal

Re: Identifying Amazon hosts...

2021-07-28 Thread David B Funk

On Wed, 28 Jul 2021, Antony Stone wrote:


On Wednesday 28 July 2021 at 19:51:49, Pedro David Marco wrote:


Hi!
i have spam with this header:

 Received: from a48-115.smtp-out.amazonses.com (HELO
a48-115.smtp-out.amazonses.com) (54.240.48.115)

Is there any way, based on its fqdn, to know whether an Amazon smtp host is
public or dedicated?


Apologies for what may seem like a silly question, but what's the difference?


I'm assuming he's asking if there's a chance that it's an open-relay SMTP server 
or one dedicated to Amazon client systems.


I'd be shocked if it was an open-relay, it'd probably be hammered by now if it 
were.


There's enough spam coming from AWS clients as-is. I've seen malware and phishes 
coming out of AWS, I wouldn't wouldn't unconditionally trust anything from 
them.



--
Dave Funk   University of Iowa
 College of Engineering
319/335-5751   FAX: 319/384-05491256 Seamans Center, 103 S Capitol St.
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include 
Better is not better, 'standard' is better. B{


Re: Identifying Amazon hosts...

2021-07-28 Thread Pedro David Marco
 Hi Antony,
please accept my apologizes and excuse my lack of accuracy on asking. i have 
knowledge near zero on Amazon, AWS, SES, etc..
My believe is that there are public amazon smtp servers that can be used by 
their customers (SES) and servers you have for your own...
Again, please everybody, bare with my lack of  knowledge
Thanks.
On Wednesday, July 28, 2021, 08:05:27 PM GMT+2, Antony Stone 
 wrote:  
> Hi!
> i have spam with this header:
> 
>  Received: from a48-115.smtp-out.amazonses.com (HELO
> a48-115.smtp-out.amazonses.com) (54.240.48.115)
> 
> Is there any way, based on its fqdn, to know whether an Amazon smtp host is
> public or dedicated?
> Apologies for what may seem like a silly question, but what's the difference?

>Antony.

  

Re: Identifying Amazon hosts...

2021-07-28 Thread Antony Stone
On Wednesday 28 July 2021 at 19:51:49, Pedro David Marco wrote:

> Hi!
> i have spam with this header:
> 
>  Received: from a48-115.smtp-out.amazonses.com (HELO
> a48-115.smtp-out.amazonses.com) (54.240.48.115)
> 
> Is there any way, based on its fqdn, to know whether an Amazon smtp host is
> public or dedicated?

Apologies for what may seem like a silly question, but what's the difference?


Antony.

-- 
Normal people think "If it ain't broke, don't fix it".
Engineers think "If it ain't broke, it doesn't have enough features yet".

   Please reply to the list;
 please *don't* CC me.


Identifying Amazon hosts...

2021-07-28 Thread Pedro David Marco
Hi!
i have spam with this header:

 Received: from a48-115.smtp-out.amazonses.com (HELO 
a48-115.smtp-out.amazonses.com) (54.240.48.115)

Is there any way, based on its fqdn, to know whether an Amazon smtp host is 
public or dedicated?

Thanks!
Pedreter.