Problem with SPam, some SPAM going through filter.

[Ali Jawad]

Hi Mark
Thanks for the suggestion, however I do not send my outgoing emails through
the same incoming spam filter. So watermarking is not applicable here. At
least that is what I understood from my readings.
Thanks

On Wed, Jul 30, 2008 at 12:17 PM, Mark <mcornes at loreto.ac.uk> wrote:

>  I had lots of these recently one day some 200+ reached our CEO! Ouch.
> Anyway look up Watermarking and "joe-job" attacks. In the MailScanner.conf
> try adding this feature and pushing all your mail out via your mailscanner
> gateway so then you know that any NDR messages have originated from
> yourself.
>
> M
>
> # Do you want to add a watermark to each email message?
> # Setting this enables delivery error messages to be identified as yours
> # so you want to see them. Delivery error messages without valid watermarks
> # are treated as spam (or whatever you set below), as you probably don't
> # want to see them. Spammers can send vast quantities of spam claiming to
> # come from you so that you get all the delivery errors (known as a
> "joe-job"
> # attack).
> # This can also be the filename of a ruleset.
> Add Watermark = yes
>
>
> On 30/07/2008 09:40, "Ali Jawad" <alijawad1 at gmail.com> wrote:
>
>  Hi
> I am running Mailscanner/Mailwatch I am facing the following problem.  A
> lot of emails are passing through my incoming spam filter camouflaged as
> NDR. Stating subject such as "Message Could Not Be Delivered" and "User not
> available". I clearly know this is spam because I closely monitor outgoing
> emails and all is fine there.
> What can I do so that those emails are marked as Spam correctly instead of
> reaching Outlook as System Administrator messages. Their scores are almost
> always below 2.
>
> Some of the originating email servers are :
>
> map.ttn.ru <http://map.ttn.ru/> <http://map.ttn.ru/>
> relay.tpn.ru <http://relay.tpn.ru/> <http://relay.tpn.ru/>
> earth.sysprog.spb.ru <http://earth.sysprog.spb.ru/><http://earth.sysprog.spb.ru/>
> mail.couo.ru <http://mail.couo.ru/> <http://mail.couo.ru/>
> mint.ldsoft.ru <http://mint.ldsoft.ru/> <http://mint.ldsoft.ru/>
>
> Can I block those server ?
>
> Thanks
>
> ------------------------------
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 
-- 
With Regards
Ali Jawad System Administrator
http://www.alijawad.org
Phone : +961-01-559031
Mobile : +961-03-041705


----------------------------------------------------


Confidentiality Notice: The contents of this E-mail are intended for the
named recipient only. It may contain confidential and privileged
information. If you received it in error, please notify us immediately and
then destroy it. Internet communications are not secure and therefore
I do we do not accept legal responsibility
for the contents of this message. Also, and though we provide every effort
to keep our network free from viruses, you would need to check this E-mail
and any attachments for viruses as we can take no responsibility for any
computer virus which might be transferred by way of this E-mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080730/7610a403/attachment.html