Another attack to fight off

Vlad Mazek v at vladville.com
Thu Feb 28 20:38:06 GMT 2008


The problem too is that at least here we've seen a 40% increase in message
load specifically in NDRs and null senders over the past 2-3 days. The iron
is starting to turn orange..

-Vlad

On 2/28/08, Scott Silva <ssilva at sgvwater.com> wrote:
>
> on 2-28-2008 9:39 AM Kevin Miller spake the following:
>
> > Scott Silva wrote:
> >> I see a new reason to block OoO replies;
> >>
> >> It seems that spammers are using legitimate webmail accounts to
> >> bounce their garbage via OoO replies. Just fake the sender, and
> >> suddenly you have spam with legitimate DKIM sigs, valid SPF, and
> >> maybe even whitelists.
> >>
> >>
> > http://www.networkworld.com/news/2008/022608-out-of-office-messages-turn
> > ed.html
> >> Filthy spammers!
> >
> > Dang those boys are clever.  Imagine if they turned their creativity to
> > world peace and cheap, clean energy.  Too bad there's no money in that.
> >
> > So how are you blocking Oo0 replies?  There a spamassassin ruleset for
> > that or what?
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080228/72c2176c/attachment.html


More information about the MailScanner mailing list