I have probably received close to two dozen of these messages from "US NMA" in 
the past week or two. It appears that the subject line does not change, so I 
think your solution is valid. I'm also seeing other spam recently that appears 
to be sent by senders with valid e-mail addresses and which respond to 
challenge messages.

I'm thinking of abandoning the reply function and requiring senders to visit 
the web site to validate with a URL instead.


----- Original Message ----
From: Keith Roberts <[EMAIL PROTECTED]>
To: tmda-users@tmda.net
Sent: Saturday, July 7, 2007 8:37:34 AM
Subject: Avalanche of SPAM


Hi. Here are a few excerpts from my incoming log - tmda 
1.0.3.

Date: Sat Jul 7 05:09:40 BST 2007
From: US NMA <[EMAIL PROTECTED]>
   To: [EMAIL PROTECTED]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[EMAIL PROTECTED])(6148)

Date: Sat Jul 7 05:09:44 BST 2007
From: US NMA <[EMAIL PROTECTED]>
   To: [EMAIL PROTECTED]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[EMAIL PROTECTED])(6147)

Date: Sat Jul 7 05:09:46 BST 2007
From: US NMA <[EMAIL PROTECTED]>
   To: [EMAIL PROTECTED]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[EMAIL PROTECTED])(6135)

Anyone else getting this avalanche? My solution was to add 
the following line to my incoming filter file, after 
checking for mail I want to accept:

# unacceptable regex matches for Subject: mail header field
headers-file ~/.tmda/filters/subject_reject
[EMAIL PROTECTED]

and in the subject_reject file add the following regex line 
to match:

"The United States National Medical Association"

It seems that blocking spam on the From: address hardly 
works, as the from address keeps changing, whereas the 
subject line is alot more constant.

HTH

Regards

Keith

------------------------------------------------------------
http://www.karsites.net
http://www.raised-from-the-dead.org.uk

This email address is challenge-response protected with
http://www.tmda.net

**Report Spam To One Place**

We at FixingEmail.org are putting together a list of email 
addresses to which we will forward all spam from a single 
address. The idea being that rather than just deleting your 
spam, you can also quite easily forward it to 
[EMAIL PROTECTED] knowing it will automatically forward 
to all the email addresses taking spam collections.

http://www.fixingemail.org

------------------------------------------------------------
_____________________________________________
tmda-users mailing list (tmda-users@tmda.net)
http://tmda.net/lists/listinfo/tmda-users


       
____________________________________________________________________________________
Get the free Yahoo! toolbar and rest assured with the added security of spyware 
protection.
http://new.toolbar.yahoo.com/toolbar/features/norton/index.php
_____________________________________________
tmda-users mailing list (tmda-users@tmda.net)
http://tmda.net/lists/listinfo/tmda-users

Reply via email to