Re: new kind of spam (apparently from mailer daemon)

2010-04-27 Thread Lucio Chiappetti
On Mon, 26 Apr 2010, Joseph Brennan wrote: empty and there was a single attachment transcript.zip. Very old-school, using pif and scr file extensions and the name with a lot of spaces in it (actually more spaces than I show here). After posting, I found that a few other passed through, and

Re: new kind of spam (apparently from mailer daemon)

2010-04-27 Thread John Hardin
On Tue, 27 Apr 2010, Lucio Chiappetti wrote: On Mon, 26 Apr 2010, Joseph Brennan wrote: empty and there was a single attachment transcript.zip. Very old-school, using pif and scr file extensions and the name with a lot of spaces in it (actually more spaces than I show here). After

Re: new kind of spam (apparently from mailer daemon)

2010-04-27 Thread John Hardin
On Tue, 27 Apr 2010, John Hardin wrote: On Tue, 27 Apr 2010, Lucio Chiappetti wrote: On Mon, 26 Apr 2010, Joseph Brennan wrote: empty and there was a single attachment transcript.zip. Very old-school, using pif and scr file extensions and the name with a lot of spaces in it

Re: new kind of spam (apparently from mailer daemon)

2010-04-26 Thread Aaron Wolfe
On Mon, Apr 26, 2010 at 4:27 AM, Lucio Chiappetti lu...@lambrate.inaf.it wrote: I have just found a new kind of spam which went through our spamassassin (actually it got a banned notification - we quarantine spam and virus but let banned be delivered). The subject was Delivery reports about

Re: new kind of spam (apparently from mailer daemon)

2010-04-26 Thread BILLY/NICER
Dear Sir / Madam, I don't know what's happen about the spam, I just asking you to remove me from the block list, because I can't send email to my customer. Please help and settle the problem. Thanks Best Regards, Billy Lau Direct Line:(852) 3969 0684 / Cell Phone:(852) 9220 1286 Email:

Re: new kind of spam (apparently from mailer daemon)

2010-04-26 Thread John Hardin
On Mon, 26 Apr 2010, Lucio Chiappetti wrote: My question is : is it ok to feed it into the sa-learn crontab we use for spam which escapes spamassassin, or the way it is forged will cause problems (e.g. filtering legitimate mailer daemon reports ?) If that worries you, then train some

Re: new kind of spam (apparently from mailer daemon)

2010-04-26 Thread Joseph Brennan
Lucio Chiappetti lu...@lambrate.inaf.it wrote: The subject was Delivery reports about your e-mail, the apparent originator was From: MAILER-DAEMON nore...@ourdomain, the body was empty and there was a single attachment transcript.zip. Here, yesterday, 93 of 102 came from hosts in Spamhaus