Another attack to fight off

Daniel Straka dstraka at caspercollege.edu
Thu Feb 28 20:49:13 GMT 2008


I'm seeing Vlad's problem too, only 100% (2x) more than last week, it's unnerving...

>>> On 2/28/2008 at 1:38 PM, in message
<eb3cb5620802281238y3e7979bbq484c21d7a690f2dc at mail.gmail.com>, "Vlad Mazek"
<v at vladville.com> wrote:
> The problem too is that at least here we've seen a 40% increase in message
> load specifically in NDRs and null senders over the past 2-3 days. The iron
> is starting to turn orange..
> 
> -Vlad
> 
> On 2/28/08, Scott Silva <ssilva at sgvwater.com> wrote:
>>
>> on 2-28-2008 9:39 AM Kevin Miller spake the following:
>>
>> > Scott Silva wrote:
>> >> I see a new reason to block OoO replies;
>> >>
>> >> It seems that spammers are using legitimate webmail accounts to
>> >> bounce their garbage via OoO replies. Just fake the sender, and
>> >> suddenly you have spam with legitimate DKIM sigs, valid SPF, and
>> >> maybe even whitelists.
>> >>
>> >>
>> > http://www.networkworld.com/news/2008/022608-out-of-office-messages-turn 
>> > ed.html
>> >> Filthy spammers!
>> >
>> > Dang those boys are clever.  Imagine if they turned their creativity to
>> > world peace and cheap, clean energy.  Too bad there's no money in that.
>> >
>> > So how are you blocking Oo0 replies?  There a spamassassin ruleset for
>> > that or what?
>>
>>



More information about the MailScanner mailing list