-- Original Message --
From: Sheldon Koehler [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Thu, 28 Oct 2004 12:12:11 -0700
It is obvious they are using disposable domain names. They come in flavors like
gbzqrx.info and so on.
$10 domain names don't put much of a dent in their profits.
Darin.
- Original Message -
From: Kim Premuda [EMAIL PROTECTED]
To: Declude JunkMail Forum [EMAIL PROTECTED]
Sent: Saturday, October 30, 2004 1:34 AM
Subject: FWD: Re: Re[2]: [Declude.JunkMail] Spam getting through
On Thursday, October 28, 2004, 1:29:55 PM, Sheldon wrote:
SK We have been experiencing the same thing. The spammers seem to be getting
SK better at passing filters and probably changing IPs and domains as fast as
SK they can be listed in the spam databases. We have some really hard core
SK
On Thursday, October 28, 2004, 1:49:25 PM, Andrew wrote:
CA No, I haven't seen this.
CA But I have meant to ask if others on the list are seeing that their spam
CA volumes are up in the last week. I have, by a 10% increase. What I'm
CA seeing is not more spam getting to mailboxes, just more
This is a good argument for the delayed-scan-and-deliver feature I
suggested previously. The porn guys you are probably talking about we
call the mad-lib pornsters. Every day or so they will come out with
a brand new set of domains delivering a wide array of porn traffic.
Actually, our robots
]
To: Sheldon Koehler [EMAIL PROTECTED]
Sent: Thursday, October 28, 2004 2:58 PM
Subject: Re[2]: [Declude.JunkMail] Spam getting through
On Thursday, October 28, 2004, 1:29:55 PM, Sheldon wrote:
SK We have been experiencing the same thing. The spammers seem to be
getting
SK better at passing filters
This is a good argument for the delayed-scan-and-deliver
feature I suggested previously. The porn guys you are
probably talking about we call the mad-lib pornsters. Every
day or so they will come out with a brand new set of domains
delivering a wide array of porn traffic.
Actually, our
Check my logic on this...
For the first rule we would run the external filter DELAYSCANANDDELIVER.
The external .exe checks the sender IP against the database and either
issues exit code 0 (process) 1 (STOPALLTESTS)
If the external .exe doesn't find an IP w/ proper timeset offset in the
database
