corporate spam

[Dave Helton]

Lately I've been seeing a lot of spam out some IP's in the Netherlands, advertising Overstock, ADT,
some ink vendors and a whole bunch of other crap.  The messages average around 190k per email,
and some are pushing over 250k.  Not your small time spammer anymore.

I set the "Max Spam Check Size" to 500k and added the following rule to my local.cf

uri                    KD0YU_GOAWAY_26            /http\:\/\/.*\.us\/php\/off\/\d\d(\d)?\.\d\d\/(top|sub)\/.*/i
describe        KD0YU_GOAWAY_26            Overstock,ADT,or Ink, or whatever
score              KD0YU_GOAWAY_26            50

HTH's

--Dave

-- 
This message has been scanned for viruses and dangerous content
by MailScanner at KD0YU.COM, and is believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120916/bd3131d6/attachment.html