"random" spam - was: Fwd: Find an eBook reader and keep the reading alive

[Richard Mealing]

>
>-----Original Message-----
>From: MailScanner [mailto:mailscanner-bounces+richard=fastnet.co.uk at lists.mailscanner.info] On Behalf Of Mark Sapiro
>Sent: Thursday, January 5, 2017 00:15
>To: mailscanner at lists.mailscanner.info
>Subject: Re: "random" spam - was: Fwd: Find an eBook reader and keep the reading alive
>
>On 01/04/2017 03:56 PM, Walt Thiessen wrote:
>> 
>> The send domains are all different. The servers are all different. The 
>> IPs are all different. They end up on blacklists in due course, but by 
>> then they've moved on to their next "victim" server IP.
>> 
>> Anyone else running into this stuff? Any idea how to block it? 
>
>
>I use Botnet in SpamAssassin - <https://github.com/eilandert/Botnet.pm
>
>It can help. You have to watch closely for a bit and possibly adjust the score, and you will still get occasional false positives, but I like it.


Hi Mark,

This seems to be working very well for me. I didn't know about this one. Do you recommend any other modules / plugins for SA?

Thanks!
Rich


>
>-- 
>Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
>San Francisco Bay Area, California    better use your sense - B. Dylan
>
>
>--
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner