NOBODY EVER ANSWERS QUESTIONS TO THIS LIST

Glenn Steen glenn.steen at gmail.com
Wed Dec 17 08:45:26 GMT 2008


2008/12/17 Bjorgen T. Eatinger <beatinger at edenhosting.net>:
> What the hell is the stupid mailing list for if nobody every fucking answers it??
>

Well, for one thing... Your tone is non-conducive with replying. Bad
manners/language tend to put people off from _helping YOU for free_.

Apart from that Brent, Hugo and James had given you some good advice,
so I (among several others) refrained from answering... although one
could do other things than a pure SA solution, as James suggested (is
it envelope sender of "From:" line that is spoofed? If the former, are
you in a situation where you can REJECT such attempts (ie having a
very controlled _sending_ situation, so to speak? Would save some
resources compared to SA, perhaps bnnot so much compared to an
SPF-based thing, as suggested by Brent).

Why nobody answers to you directly (apart from me:-)? Because this is
a mailing list. If you're on it, it should be enough to mail to
that... hence noone press "reply all"...
If you bother to ask the list, at least bother to try track it. If you
don't like to be a member, then use gmane. Jeez...

Why do you have a snippet of spam-looking HTML at the end?

-- 
-- Glenn

> -----Original Message-----
> From: Bjorgen T. Eatinger
> Sent: Sunday, December 14, 2008 8:18 PM
> To: mailscanner at lists.mailscanner.info
> Cc: Bjorgen T. Eatinger
> Subject: NOBODY EVER ANSWERS QUESTIONS TO THIS LIST
>
> 1. NOBODY EVER ANSWERS QUESTIONS TO THIS LIST---Why?
>
> 2. There has been (for at least the last 3 weeks) a recent huge flood of emails that are setup to "appear" to have originated from the same email address which the SPAM is being sent to, and the addresses are perfectly valid addresses stored on our email server (NOT ACCOUNTS, but valid ALIASES).
>
> For example a valid alias on our mail server would be: booking at edenaudio.com
>
> The SPAM email is SENT to that email address and is also setup to COME from that address.
>
> Has there been any discussion or attempts to get rid of this most annoying new type of SPAM?  I don't see it as very difficult to catch, as the following conditions are always TRUE in all cases:
>
> a. SAME FROM ADDRESS AS THE TO ADDRESS (this is normally only done when testing)
>
> b. Almost every email contains "status" in the subject
>
> c. Every email always contains HTML and the words "click here" in every one (see below)
>
> I believe any one of these items would work to stop this flood of email (especially b or c).  Can you please let me know how I could implement any one or all of these methods?
>
> Thank you!
>
>
> <BODY><table>
> <tr><td><a href="http://downgrand.com/"><img src="http://images.downgrand.com/acai3.jpg" border=0 alt="Click here to try!"></a><br>
> <br><a href="downgrand.com"><b>Crazy weight loss formula</b></a></td></tr></table>
> <br><br><font size="-2" color="Azure">
> Arab and Middle East leaders meet in Riyadh, Saudifun."<br>
> into a different phase" of operations, and that Iran hasWednesday, March 28, 2007<br>
> 63 seats are required for a majority government inreport was tabled.</font></BODY></HTML>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se


More information about the MailScanner mailing list