Matt:
Is SpamAssassin off?
Posted by martin on 9/15/03 at 10:33AM
Comments:
Depends
for what email address? I had to redo the settings per account a couple weeks ago and I can easily have missed one..
Posted by matt on 9/15/03 at 10:46AM
why do you ask?
Someone started using random addresses @recurse.net for spam to AOL, and so I've gotten 75 bounce messages so far from the AOL mail server about nonexistant accounts or mail refusal.... that's just the BOUNCES -- no idea how many have gotten through. And since these are legitimate bounce messages, few of them look spamish enough to be caught by sa. (They would be easy to filter since it's not like AOL's mail server tries to be obscure, but I haven't bothered to do this yet.)
Are you receiving stuff like this for your domain, too? If so, maybe they picked up the domain names off of morecooler or something...
Are you receiving stuff like this for your domain, too? If so, maybe they picked up the domain names off of morecooler or something...
Posted by brian on 9/15/03 at 11:51AM
Don't worry about aol..
at some point they will just block the server's IP address so you can't send or receive mail from them.
Posted by matt on 9/15/03 at 1:39PM
all of 'em
Everything @ mwoodard.com, mwoody.com, and thetombs.com, I guess. Nothing is coming in with ***SPAM*** in front.
Posted by martin on 9/15/03 at 1:45PM
ok
see if it works now. It looks like I tried fixing it up before but somehow inserted the "vi" help text into your mail config file for the spam mail. heh.. bet that confused it..
Posted by matt on 9/15/03 at 3:04PM
Spam bounces
Brian, this has been happening to a lot of people all over the place. I had a lot of those a couple of weeks back, but not so much lately. If it's the same thing that happened to me, it'll pass in a few days.
Posted by bryce on 9/15/03 at 5:52PM
spam
matt:
Considering out of the 100+ bounces I've recieved, only 7 emails have originated at duplicate email addresses it's not that simple.
bryce:
I hope so... it's gettin freakin' annoying.
Considering out of the 100+ bounces I've recieved, only 7 emails have originated at duplicate email addresses it's not that simple.
bryce:
I hope so... it's gettin freakin' annoying.
Posted by brian on 9/15/03 at 9:47PM
correction
not email addresses, SOURCE IPs
they're using rooted windows boxes across the Internet and the world to send this spam
they're using rooted windows boxes across the Internet and the world to send this spam
Posted by brian on 9/15/03 at 9:47PM
more info
If you really want to see what I mean:
Hosts that mail have been sent from
"From" fields that mail is bounced back to
Hosts that mail have been sent from
"From" fields that mail is bounced back to
Posted by brian on 9/15/03 at 9:55PM
Wow, you win...
They just harvested my address off of Monster (monsterbrycekujala.com) and used that. It made it easy to filter so no one actually tries to hire me off of Monster. Well, unless sending me bounce messages was some weird interview question. Hmmm...
BTW, check out the new Thunderbird mail client from the fine folks that brought us Firebird. One of its coolest features is a learning spam filter. I haven't officially made the switch, but I've been digging it as I play around with it.
BTW, check out the new Thunderbird mail client from the fine folks that brought us Firebird. One of its coolest features is a learning spam filter. I haven't officially made the switch, but I've been digging it as I play around with it.
Posted by bryce on 9/15/03 at 11:05PM
it's not Thunderbird or friends
it's the underlying engine... Netscape 7.1 (which I'm using at work) has it too
Posted by brian on 9/16/03 at 9:25AM
Too much spam info...
Man, that was way too much info on spam =)
Posted by jeff on 9/17/03 at 7:15AM
It's easy to induce vomiting.
It doesn't mean that I have to do it. =)
Posted by bryce on 9/17/03 at 10:56AM
no... but....
I DID have reasons for generating those files... it's just posting them that wasn't necessary.
Posted by brian on 9/17/03 at 2:05PM
Post comment:
Commenting disabled because this is an archive.
