Another attack to fight off

Vlad Mazek v at vladville.com
Thu Feb 28 21:32:51 GMT 2008


It's escalating too :( which is why I'm trying to do the split queue thing
but MailScanner has a big bold FIXME where it parses for incoming
directories..

On 2/28/08, Daniel Straka <dstraka at caspercollege.edu> wrote:
>
> I'm seeing Vlad's problem too, only 100% (2x) more than last week, it's
> unnerving...
>
> >>> On 2/28/2008 at 1:38 PM, in message
> <eb3cb5620802281238y3e7979bbq484c21d7a690f2dc at mail.gmail.com>, "Vlad
> Mazek"
>
> <v at vladville.com> wrote:
> > The problem too is that at least here we've seen a 40% increase in
> message
> > load specifically in NDRs and null senders over the past 2-3 days. The
> iron
> > is starting to turn orange..
> >
> > -Vlad
> >
> > On 2/28/08, Scott Silva <ssilva at sgvwater.com> wrote:
> >>
> >> on 2-28-2008 9:39 AM Kevin Miller spake the following:
> >>
> >> > Scott Silva wrote:
> >> >> I see a new reason to block OoO replies;
> >> >>
> >> >> It seems that spammers are using legitimate webmail accounts to
> >> >> bounce their garbage via OoO replies. Just fake the sender, and
> >> >> suddenly you have spam with legitimate DKIM sigs, valid SPF, and
> >> >> maybe even whitelists.
> >> >>
> >> >>
> >> >
> http://www.networkworld.com/news/2008/022608-out-of-office-messages-turn
> >> > ed.html
> >> >> Filthy spammers!
> >> >
> >> > Dang those boys are clever.  Imagine if they turned their creativity
> to
> >> > world peace and cheap, clean energy.  Too bad there's no money in
> that.
> >> >
> >> > So how are you blocking Oo0 replies?  There a spamassassin ruleset
> for
> >> > that or what?
> >>
> >>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 

-Vlad
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080228/1935bd48/attachment.html


More information about the MailScanner mailing list