Another attack to fight off

[Scott Silva]

on 2-28-2008 12:38 PM Vlad Mazek spake the following:
> The problem too is that at least here we've seen a 40% increase in 
> message load specifically in NDRs and null senders over the past 2-3 
> days. The iron is starting to turn orange..
> 
> -Vlad
> 
> On 2/28/08, *Scott Silva* <ssilva at sgvwater.com 
> <mailto:ssilva at sgvwater.com>> wrote:
> 
>     on 2-28-2008 9:39 AM Kevin Miller spake the following:
> 
>      > Scott Silva wrote:
>      >> I see a new reason to block OoO replies;
>      >>
>      >> It seems that spammers are using legitimate webmail accounts to
>      >> bounce their garbage via OoO replies. Just fake the sender, and
>      >> suddenly you have spam with legitimate DKIM sigs, valid SPF, and
>      >> maybe even whitelists.
>      >>
>      >>
>      >
>     http://www.networkworld.com/news/2008/022608-out-of-office-messages-turn
>      > ed.html
>      >> Filthy spammers!
>      >
>      > Dang those boys are clever.  Imagine if they turned their
>     creativity to
>      > world peace and cheap, clean energy.  Too bad there's no money in
>     that.
>      >
>      > So how are you blocking Oo0 replies?  There a spamassassin
>     ruleset for
>      > that or what?
> 
Milter-null might help, from what I have read in the list before.


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080228/125de3de/signature.bin