NOBODY EVER ANSWERS QUESTIONS TO THIS LIST

Mon Dec 15 04:36:37 GMT 2008

On Sun, 2008-12-14 at 20:17 -0800, Bjorgen T. Eatinger wrote:

> 1. NOBODY EVER ANSWERS QUESTIONS TO THIS LIST---Why?
> 
> 2. There has been (for at least the last 3 weeks) a recent huge flood of emails that are setup to "appear" to have originated from the same email address which the SPAM is being sent to, and the addresses are perfectly valid addresses stored on our email server (NOT ACCOUNTS, but valid ALIASES).
> 
> For example a valid alias on our mail server would be: booking at edenaudio.com
> 
> The SPAM email is SENT to that email address and is also setup to COME from that address.
> 
> Has there been any discussion or attempts to get rid of this most annoying new type of SPAM?  I don't see it as very difficult to catch, as the following conditions are always TRUE in all cases:
> 
> a. SAME FROM ADDRESS AS THE TO ADDRESS (this is normally only done when testing)
> 
> b. Almost every email contains "status" in the subject
> 
> c. Every email always contains HTML and the words "click here" in every one (see below)
> 
> I believe any one of these items would work to stop this flood of email (especially b or c).  Can you please let me know how I could implement any one or all of these methods?
> 
> Thank you!
> 
> 
> <BODY><table>
> <tr><td><a href="http://downgrand.com/"><img src="http://images.downgrand.com/acai3.jpg" border=0 alt="Click here to try!"></a><br>
> <br><a href="downgrand.com"><b>Crazy weight loss formula</b></a></td></tr></table>
> <br><br><font size="-2" color="Azure">
> Arab and Middle East leaders meet in Riyadh, Saudifun."<br>
> into a different phase" of operations, and that Iran hasWednesday, March 28, 2007<br>
> 63 seats are required for a majority government inreport was tabled.</font></BODY></HTML>
> 
> 

1 - uhh. what? I rarely see anything go unanswered

2 -  Setup SPF or DKIM or both. I am guessing the mail isn't coming from
your mail server in the first place?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20081215/6c062d31/attachment.html