Thanks guys, yes you were right, just checking to see if you were taking
note ;) you passed the test.
David Barker
www.declude.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Carter
Sent: Friday, October 07, 2005 5:41 PM
To:
Hi,
For the last few weeks, we've seen an explotion of spam mail with the from
line as New Account. The subject and text vary. Some messages get caught
by our threshold and dumped, but many do not. Sniffer seems to spot these
pretty effectively, but not always and we don't take action on
Hi -
Well this is what I do on these -
Right off I put the ip space in my ipfile_suspicious_networks
65.175.2.0/24 Viper Hosting
If I keep getting spam from then then they go to the ipfile_networks
which I score higher.
Same for an entry into ipfile_suspicious_hosts
I then I would
This is spam from Scott Ricter, Spamhaus's #1 listed spammer. This
particular block is 65.175.2.0/24. Surprisingly it isn't widely listed,
but I did find it in MAILPOLICE, and if you have URIBL support, it is
also in SURBL presently.
Matt
IMail Admin wrote:
Hi,
For the last few weeks,
You are always on top of this stuff Matt!
-Nick
Matt wrote:
This is spam from Scott Ricter, Spamhaus's #1 listed spammer. This
particular block is 65.175.2.0/24. Surprisingly it isn't widely
listed, but I did find it in MAILPOLICE, and if you have URIBL
support, it is also in SURBL
I would suggest you look at incorporating a URI type checker like invURIBL
as opnletters.com has been in SURBL for a while and I am showing hits back
as far as September 1st for that particular domain.
uribl-logfile0901.txt:2005-09-01 00:15:22.656 2005-09-01 00:15:22.953
I don't know whether or not I should be proud of that accomplishment :-/
Matt
Nick Hayer wrote:
You are always on top of this stuff Matt!
-Nick
Matt wrote:
This is spam from Scott Ricter, Spamhaus's #1 listed spammer. This
particular block is 65.175.2.0/24. Surprisingly it isn't widely
