Big increase in spam

[Kit Wong]

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Hugo
van der Kooij
Sent: 27 November 2008 06:28
To: MailScanner discussion
Subject: Re: Big increase in spam

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Arthur Stephens wrote:
> Is it just me or did spammers figure out a away to get around mail
scanner.
> I used not get any spam at all. But now so far today I have received
20
> to 30 so far.
> So I upgraded MailScanner - double checked config settings but they
> still keep coming.

Well. What are the SA scores for those messages?

My guess: Your SA database has been poluted so your SA score will stick
around 50% and without other matches in SA that is usually not enough to
be stopped.

Hugo.

- --
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

Nid wyf yn y swyddfa ar hyn o bryd. Anfonwch unrhyw waith i'w gyfieithu.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFJLj3eBvzDRVjxmYERAtklAJ9bVjGuGm9bw4AeRDS8dZ2qCHqrZwCfQd3r
PFW5VQ25sihyDuS4orGGtlo=
=67k0
-----END PGP SIGNATURE-----
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-- 
Scanned by MailScanner.
------------------------------------------------------------------

I have noticed 50% increase here. They are a variant of "Night of
Pleasure" as the subject all from different ip/senders/emails etc.
I have greylisting, 3 rbl in sendmail and they are getting through. 
I noticed that they all get a hit with KAM_THEBAT which I have now
bumped up the score. This has caught 99% of them. (not sure if anyone
actually use THEBAT, but that's too bad at the moment).

Regards

Kit