<br><font size=2 face="sans-serif">I'm plagued with the same... I'll add
in my (Well over 1000) messages a year.</font>
<br>
<br><font size=2 face="sans-serif">Hamish.</font>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=39%><font size=1 face="sans-serif"><b>Bruno <x.mailscanner.mail@MELLONI.COM></b>
</font>
<br><font size=1 face="sans-serif">Sent by: MailScanner mailing list <MAILSCANNER@JISCMAIL.AC.UK></font>
<p><font size=1 face="sans-serif">16/10/2002 12:25</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
MailScanner mailing list <MAILSCANNER@JISCMAIL.AC.UK></font></div></table>
<br>
<td width=60%>
<table width=100%>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td valign=top><font size=1 face="sans-serif">MAILSCANNER@JISCMAIL.AC.UK</font>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td valign=top>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td valign=top><font size=1 face="sans-serif">Stopping sneaky spammers</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2><tt>Hello all,<br>
</tt></font>
<br><font size=2><tt>I have found a major spamming outfit (HighSpeedMail)
that is very aggressive<br>
at avoiding being detected by anti-spam software (including my installed<br>
MailScanner and SpamAssassin - using default rules, even the default and<br>
quite aggressive "5" blocking level, since SA usually ranks them
over 3 and<br>
below 5).<br>
</tt></font>
<br><font size=2><tt>Unless a good way to block them is found, I fear other
spamming outfits will<br>
soon follow on their tacticts. Suggestions on how to block them permanently<br>
would be welcome.<br>
</tt></font>
<br><font size=2><tt>Here are some details:<br>
</tt></font>
<br><font size=2><tt>1) They seem to always fake their email address (hi-speed.ch,<br>
hi-speedmail.com, hi-speedmail.net, hi-speedemail.com, hi-speedemail.net,<br>
hi-speedmediaoffers.com, hispeedmediaoffers.com, hispeedmediaoffers.net,<br>
hsm-mailer.com, hsm-mailerdirect.com, hsmmailer.com, hsmailer.com).<br>
2) The spam seems to originate from a few addresses in the 10.0.1.* network,<br>
but is delivered/routed via other IPs, before it reaches me.<br>
3) The delivery IPs change but seem to come from the same class C subnet
for<br>
about 2 weeks at a time (64.70.20.*, 64.70.44.*, 12.158.236.*,<br>
148.233.70.50, 217.168.208.252).<br>
4) I am using /etc/mail/access to block the delivery class C subnets for<br>
this spam, but have to keep adding new ones.<br>
5) I use the free Spam List from the default MailScanner installation<br>
(ORDB-RBL), but they seem to avoid it quite easily. I am a home user,
and<br>
cannot afford paying for a commercial list.<br>
6) Possible alternative solution: A few months ago I read in InfoWorld
that<br>
"in theory" in the US it is possible to sue spammers for $1000
per spam<br>
message. I probably get about 1000 spams per year that I can trace
to these<br>
specific spammers. Does anybody know of a lawyer that specializes on this<br>
type of lawsuit and will work for a percentage of the amount collected?</tt></font>
<br>