eBay Spam

[Glenn Steen]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On 08/12/05, Mike Kercher <mike at camaross.net> wrote:
> MailScanner mailing list <> scribbled on Wednesday, December 07, 2005 10:03
> PM:
>
> > Having issues with ebay spam, is there a way to stop this
> > from coming in, using MailScanner, SA and Sophos Anti-Virus,
> > Postfix on a Debian Server.
> > Sorry for the last e-mail forgot to include the contents of
> > the header:
> > Received: from mail.mmtnetworks.com.au
> >  ([192.168.3.3])
> >  by mmtnetworks.com.au; Thu, 08 Dec 2005 11:49:50 +0800
> > Received: from ctrl.test.com (unknown [60.173.82.66])  by
> > mail.mmtnetworks.com.au (Postfix) with ESMTP id 0C1E315000B
> > for <jlmiller at mmtnetworks.com.au>; Thu,  8 Dec 2005 11:50:09
> > +0800 (WST)
> > Received: by ctrl.test.com (Postfix, from userid 500)  id
> > 758C337F508; Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> > To: jlmiller at mmtnetworks.com.au
> > Subject: {Dangerous Content?} Your account access will remain limited
> > From: PayPal <service at paypal.com>
> > Content-type: text/plain; charset="ISO-8859-1"
> > Message-Id: <20051208031956.758C337F508 at ctrl.test.com>
> > Date: Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> > X-mmtnet-MailScanner: Found to be infected
> > X-mmtnet-MailScanner-SpamCheck: not spam,  SpamAssassin
> > (Disabled due to 20 consecutive timeouts)
> > X-MailScanner-From: test at ctrl.test.com
> >
> > Warning: This message has had one or more attachments removed
> > Warning: (the entire message).
> > Warning: Please read the "mmtnet-Attachment-Warning.txt"
> > attachment(s) for more information.
> >
>
> Add ClamAV to your mix.  It catches many phishing emails.
>
> Mike
>
Yep, it takes virtually all the eBay phishing..... Instructions here:
http://wiki.mailscanner.info/doku.php?id=documentation:anti_virus:clamav:install:tarball
... then (when you've got it running) add it to the list of virus
scanners in MailScanner.conf....
You might also have a look at the Phishing net in MailScanner.... It
is really worthwihile, and should be pretty easy to make not too prone
to FP things...

--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!