Debora is a huge spammers!!!!

[Glenn Steen]

On 14/11/06, Ramprasad <ram at netcore.co.in> wrote:
> On Mon, 2006-11-13 at 18:34 +0000, Randal, Phil wrote:
> > grep -c "from=<deborah" maillog*
> > maillog:22
> > maillog.1:2421
> > maillog.2:2153
> > maillog.3:14
> > maillog.4:37
> >
>
> Just take of the last 'h' from your pattern(from=<deborah)  and see what
> are the results
>
> The senders ids are like /^debora.*/
>
> Thanks
> Ram
>
These amounts are well and good, but unless you find a method to use
this information _apart_ from an SA rule (meaning: something
applicable to SMTP conversation time), they really aren't that
interesting... Check if SA doesn't handle them all/the vast majority,
and then consider if this meager a fact is enough to build a rule
on... In my case, with a broader search, I've seen them since at least
mid-October, and all (but a vanishingly small minority) have been
correctly handled by SA.

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se