Debora is a huge spammers!!!!

[Denis Beauchemin]

Michael S. a écrit :
>
> The huge increase in stock spam that everyone is seeing is coming from 
> the username that is consistently the same. Has anyone noticed?
>
> These are different variations of the username@
>
>  
>
> deborahpessanha at bridportleisure.com 
> <mailto:deborahpessanha at bridportleisure.com>
>
> deborasalsano at brokermart.com <mailto:deborasalsano at brokermart.com>
>
> deborahvw at brooksmetals.com <mailto:deborahvw at brooksmetals.com>
>
>  
>
> Etc. Notice the first 6 characters of every username being Debora?
>
>  
>
>  
>
> Is there an exim rule that one can implement in exim.conf for example 
> that rejects all mail arriving from Debora??????@fakedomain.com 
> <mailto:Debora??????@fakedomain.com>?
>
>  
>
> Id rather do this at SMTP time instead of allows MS to kill it off as 
> there are thousands and the less MS has to work the better.
>
>  
>
> Thanks
>
I seem to be getting many thousands a day (more than 18000 
yesterday)...  I think I will deploy milter-regex:
http://www.benzedrine.cx/milter-regex.html

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x62252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3595 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20061113/267cd621/smime.bin