Spam via "innocent" machines
Brent Addis
b.addis at TIMESMEDIA.CO.NZ
Mon May 16 04:12:29 IST 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Check the thread titled "Auslaenderpolitik"
Regards,
Brent Addis
Group Systems Administrator
Times Media Group
Jeff Mills wrote:
>Hi all,
>I'm hoping somebody might be able to help with a problem we've been having lately, but mostly today.
>Some of my users have told us about an increase in spam over the last couple of days.
>One user claims she has received 50 today.
>Mailscanner is not picking up these, and when I check, they are getting scores mostly of around 1, but up to 3.
>
>These emails are in various languages, but most seem to be english and German, pointing to political news pages.
>Looking at the headers, the originating addresses appear to be dialup accounts, adsl accounts etc, which could mean these are household computers affected with a worm of some kind.
>
>The other thing thats happening is that the user will receive 50 odd undeliverable messages which would suggest that their email address was attached to outgoing spam. I dont know how I can block these without affecting legitimate undeliverable messages.
>One thing I have noticed is that of the undeliverable addresses, they all seem to start with "3D".
>For instance 3Dsomename at somehost.com
>
>Are any of you having this same issue?
>
>Cheers,
>Jeff
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the Wiki (http://wiki.mailscanner.info/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list