[IMail Forum] Unusual quantity of spam

2008-11-10 Thread Miguel Benavente
Dear all,

In the last two days we are receiving an unusual quantity of spam. I could
see that in the HTML message appear a hyperlink with this
http://qwwlmz.pmkujot.cn/[EMAIL PROTECTED].
Why do not work a rule as \.cn/removeme\.pl?to_remove= in order to
detect it?

Regards,

Miguel Benavente
__

CEMFI
Casado del Alisal, 5
28014 Madrid
España - Spain

E-mail: [EMAIL PROTECTED]
Tel: +34 91 4290551
Fax: +34 91 4291056
__


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html


Re: AW: [IMail Forum] Unusual quantity of spam

2008-11-10 Thread Miguel Benavente
Thanks.

If you use a rule like mine, why it is not working in my inbound rules?

On 10 Nov 2008 at 16:52, Martin Schaible wrote:

 Hi,

 I'm using a rule like this. Chinese Domains are the favorite spam domains
 right now.

 Freundliche Grüsse

 
 ---
 Merlin Consulting GmbH | Martin Schaible
 Bahnhofstrasse 27 | CH-8702 Zollikon | Switzerland
 Tel.: +41 44 391 30 00 | Fax: +41 44 391 32 49
 Mail: [EMAIL PROTECTED] | www.merlinconsulting.ch
 Support: support.merlinconsulting.ch
 GPS: N47 20.235 E8 34.226
 
 ---

 News - Unsere Produkte:
 .:. Brainware Columbus Software Management
 .:. delight software GmbH
 .:. NewAtlanta BlueDragon
 .:. Ipswitch Premium Partner
 .:. mxGuard/InvURIBL/MessageSniffer Antispam für IMail
 .:. SmarterTools
 .:. Declude Antispam für SmarterMail und IMail
 .:. JMuffin CMS
 .:. NOD32 Antivirus System
 .:. Kiwi Syslog Monitor
 .:. Lockstep Systems - Backup Software
 .:. Paessler Network Monitoring
 
 ---



  -Ursprüngliche Nachricht-
  Von: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Im Auftrag von
  Miguel Benavente
  Gesendet: Montag, 10. November 2008 16:12
  An: Imail_Forum@list.ipswitch.com
  Betreff: [IMail Forum] Unusual quantity of spam
 
  Dear all,
 
  In the last two days we are receiving an unusual quantity of
  spam. I could
  see that in the HTML message appear a hyperlink with this
  http://qwwlmz.pmkujot.cn/[EMAIL PROTECTED].
  Why do not work a rule as \.cn/removeme\.pl?to_remove= in order to
  detect it?
 
  Regards,
 
  Miguel Benavente
  __
 
  CEMFI
  Casado del Alisal, 5
  28014 Madrid
  España - Spain
 
  E-mail: [EMAIL PROTECTED]
  Tel: +34 91 4290551
  Fax: +34 91 4291056
  __
 
 
  To Unsubscribe: http://imailserver.com/support/discussion_list/
  List Archive:
  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
  Knowledge Base/FAQ: http://imailserver.com/support/kb.html
 


 To Unsubscribe: http://imailserver.com/support/discussion_list/
 List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 Knowledge Base/FAQ: http://imailserver.com/support/kb.html



Miguel Benavente
__

CEMFI
Casado del Alisal, 5
28014 Madrid
España - Spain

E-mail: [EMAIL PROTECTED]
Tel: +34 91 4290551
Fax: +34 91 4291056
__


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html


Re: AW: [IMail Forum] Unusual quantity of spam

2008-11-10 Thread Miguel Benavente
Hi again,

I have been checking the rules and when I have changed the blanks of the
name of rule into another character the rule has started working.
I cannot understand it, do not remind any Ipswitch's document in which
there is mentioned the prohibition of the use of whites in the names of the
rules.
May be for that reason?

On 10 Nov 2008 at 16:52, Martin Schaible wrote:

 Hi,

 I'm using a rule like this. Chinese Domains are the favorite spam domains
 right now.

 Freundliche Grüsse

 
 ---
 Merlin Consulting GmbH | Martin Schaible
 Bahnhofstrasse 27 | CH-8702 Zollikon | Switzerland
 Tel.: +41 44 391 30 00 | Fax: +41 44 391 32 49
 Mail: [EMAIL PROTECTED] | www.merlinconsulting.ch
 Support: support.merlinconsulting.ch
 GPS: N47 20.235 E8 34.226
 
 ---

 News - Unsere Produkte:
 .:. Brainware Columbus Software Management
 .:. delight software GmbH
 .:. NewAtlanta BlueDragon
 .:. Ipswitch Premium Partner
 .:. mxGuard/InvURIBL/MessageSniffer Antispam für IMail
 .:. SmarterTools
 .:. Declude Antispam für SmarterMail und IMail
 .:. JMuffin CMS
 .:. NOD32 Antivirus System
 .:. Kiwi Syslog Monitor
 .:. Lockstep Systems - Backup Software
 .:. Paessler Network Monitoring
 
 ---



  -Ursprüngliche Nachricht-
  Von: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Im Auftrag von
  Miguel Benavente
  Gesendet: Montag, 10. November 2008 16:12
  An: Imail_Forum@list.ipswitch.com
  Betreff: [IMail Forum] Unusual quantity of spam
 
  Dear all,
 
  In the last two days we are receiving an unusual quantity of
  spam. I could
  see that in the HTML message appear a hyperlink with this
  http://qwwlmz.pmkujot.cn/[EMAIL PROTECTED].
  Why do not work a rule as \.cn/removeme\.pl?to_remove= in order to
  detect it?
 
  Regards,
 
  Miguel Benavente
  __
 
  CEMFI
  Casado del Alisal, 5
  28014 Madrid
  España - Spain
 
  E-mail: [EMAIL PROTECTED]
  Tel: +34 91 4290551
  Fax: +34 91 4291056
  __
 
 
  To Unsubscribe: http://imailserver.com/support/discussion_list/
  List Archive:
  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
  Knowledge Base/FAQ: http://imailserver.com/support/kb.html
 


 To Unsubscribe: http://imailserver.com/support/discussion_list/
 List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 Knowledge Base/FAQ: http://imailserver.com/support/kb.html



Miguel Benavente
__

CEMFI
Casado del Alisal, 5
28014 Madrid
España - Spain

E-mail: [EMAIL PROTECTED]
Tel: +34 91 4290551
Fax: +34 91 4291056
__


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html