Problem with SPam, some SPAM going through filter.

[Mark]

I had lots of these recently one day some 200+ reached our CEO! Ouch. Anyway
look up Watermarking and ³joe-job² attacks. In the MailScanner.conf try
adding this feature and pushing all your mail out via your mailscanner
gateway so then you know that any NDR messages have originated from
yourself.

M

# Do you want to add a watermark to each email message?
# Setting this enables delivery error messages to be identified as yours
# so you want to see them. Delivery error messages without valid watermarks
# are treated as spam (or whatever you set below), as you probably don't
# want to see them. Spammers can send vast quantities of spam claiming to
# come from you so that you get all the delivery errors (known as a
"joe-job"
# attack).
# This can also be the filename of a ruleset.
Add Watermark = yes


On 30/07/2008 09:40, "Ali Jawad" <alijawad1 at gmail.com> wrote:

>  Hi 
> I am running Mailscanner/Mailwatch I am facing the following problem.  A lot
> of emails are passing through my incoming spam filter camouflaged as NDR.
> Stating subject such as "Message Could Not Be Delivered" and "User not
> available". I clearly know this is spam because I closely monitor outgoing
> emails and all is fine there.
> What can I do so that those emails are marked as Spam correctly instead of
> reaching Outlook as System Administrator messages. Their scores are almost
> always below 2.
> 
> Some of the originating email servers are :
> 
> map.ttn.ru <http://map.ttn.ru/>
> relay.tpn.ru <http://relay.tpn.ru/>
> earth.sysprog.spb.ru <http://earth.sysprog.spb.ru/>
> mail.couo.ru <http://mail.couo.ru/>
> mint.ldsoft.ru <http://mint.ldsoft.ru/>
> 
> Can I block those server ?
> 
> Thanks
> 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080730/7119aedb/attachment.html