eBay Spam

[Scott Silva]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jon Miller spake the following on 12/7/2005 8:02 PM:
> Having issues with ebay spam, is there a way to stop this from coming in, using MailScanner, SA and Sophos Anti-Virus, Postfix on a Debian Server.
> Sorry for the last e-mail forgot to include the contents of the header:
> Received: from mail.mmtnetworks.com.au
>  ([192.168.3.3])
>  by mmtnetworks.com.au; Thu, 08 Dec 2005 11:49:50 +0800
> Received: from ctrl.test.com (unknown [60.173.82.66])
>  by mail.mmtnetworks.com.au (Postfix) with ESMTP id 0C1E315000B
>  for <jlmiller at mmtnetworks.com.au>; Thu,  8 Dec 2005 11:50:09 +0800 (WST)
> Received: by ctrl.test.com (Postfix, from userid 500)
>  id 758C337F508; Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> To: jlmiller at mmtnetworks.com.au
> Subject: {Dangerous Content?} Your account access will remain limited
> From: PayPal <service at paypal.com>
> Content-type: text/plain; charset="ISO-8859-1"
> Message-Id: <20051208031956.758C337F508 at ctrl.test.com>
> Date: Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> X-mmtnet-MailScanner: Found to be infected
> X-mmtnet-MailScanner-SpamCheck: not spam,
>  SpamAssassin (Disabled due to 20 consecutive timeouts)
> X-MailScanner-From: test at ctrl.test.com
> 
> Warning: This message has had one or more attachments removed
> Warning: (the entire message).
> Warning: Please read the "mmtnet-Attachment-Warning.txt" attachment(s) for more information.
> 
> This is a message from the MailScanner E-Mail Virus Protection Service
> 
> Regards,
> 
> Jon L. Miller,  ASE, CNS, CLS, MCNE, CCNA
> Director/Sr Systems Consultant
> MMT Networks Pty Ltd
> http://www.mmtnetworks.com.au
> Resellers for: Novell Gold Partner, Cisco Partner, Peopletelecom, Westnet, Sophos Anti-Virus, 
> 
> "I don't know the key to success, but the key to failure
>  is trying to please everybody." -Bill Cosby
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 
> 
> ------------------------------------------------------------------------
> 
> Having issues with ebay spam, is there a way to stop this from coming
> in, using MailScanner, SA and Sophos Anti-Virus, Postfix on a Debian Server.
> Sorry for the last e-mail forgot to include the contents of the header:
> Received: from mail.mmtnetworks.com.au
>  ([192.168.3.3])
>  by mmtnetworks.com.au; Thu, 08 Dec 2005 11:49:50 +0800
> Received: from ctrl.test.com (unknown [60.173.82.66])
>  by mail.mmtnetworks.com.au (Postfix) with ESMTP id 0C1E315000B
>  for <jlmiller at mmtnetworks.com.au <mailto:jlmiller at mmtnetworks.com.au>>;
> Thu,  8 Dec 2005 11:50:09 +0800 (WST)
> Received: by ctrl.test.com (Postfix, from userid 500)
>  id 758C337F508; Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> To: jlmiller at mmtnetworks.com.au <mailto:jlmiller at mmtnetworks.com.au>
> Subject: {Dangerous Content?} Your account access will remain limited
> From: PayPal <service at paypal.com <mailto:service at paypal.com>>
> Content-type: text/plain; charset="ISO-8859-1"
> Message-Id: <20051208031956.758C337F508 at ctrl.test.com
> <mailto:20051208031956.758C337F508 at ctrl.test.com>>
> Date: Thu,  8 Dec 2005 11:19:56 +0800 (CST)
> X-mmtnet-MailScanner: Found to be infected
> X-mmtnet-MailScanner-SpamCheck: not spam,
>  SpamAssassin (Disabled due to 20 consecutive timeouts)


First thing is to fix your spamassassin timeout problem so it has a
chance of being caught as spam. Maybe add some services like DCC, Razor
or Pyzor, as they help also.


-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!