Spam via "innocent" machines

Brent Addis b.addis at TIMESMEDIA.CO.NZ
Mon May 16 04:12:29 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Check the thread titled "Auslaenderpolitik"

Regards,

Brent Addis
Group Systems Administrator
Times Media Group




Jeff Mills wrote:

>Hi all,
>I'm hoping somebody might be able to help with a problem we've been having lately, but mostly today.
>Some of my users have told us about an increase in spam over the last couple of days.
>One user claims she has received 50 today.
>Mailscanner is not picking up these, and when I check, they are getting scores mostly of around 1, but up to 3.
>
>These emails are in various languages, but most seem to be english and German, pointing to political news pages.
>Looking at the headers, the originating addresses appear to be dialup accounts, adsl accounts etc, which could mean these are household computers affected with a worm of some kind.
>
>The other thing thats happening is that the user will receive 50 odd undeliverable messages which would suggest that their email address was attached to outgoing spam. I dont know how I can block these without affecting legitimate undeliverable messages.
>One thing I have noticed is that of the undeliverable addresses, they all seem to start with "3D".
>For instance 3Dsomename at somehost.com
>
>Are any of you having this same issue?
>
>Cheers,
>Jeff
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list