Matt:

Is SpamAssassin off?

Posted by martin on 9/15/03 at 10:33AM


Comments:

Depends

for what email address? I had to redo the settings per account a couple weeks ago and I can easily have missed one..

Posted by matt on 9/15/03 at 10:46AM

why do you ask?

Someone started using random addresses @recurse.net for spam to AOL, and so I've gotten 75 bounce messages so far from the AOL mail server about nonexistant accounts or mail refusal.... that's just the BOUNCES -- no idea how many have gotten through. And since these are legitimate bounce messages, few of them look spamish enough to be caught by sa. (They would be easy to filter since it's not like AOL's mail server tries to be obscure, but I haven't bothered to do this yet.)

Are you receiving stuff like this for your domain, too? If so, maybe they picked up the domain names off of morecooler or something...

Posted by brian on 9/15/03 at 11:51AM

Don't worry about aol..

at some point they will just block the server's IP address so you can't send or receive mail from them.

Posted by matt on 9/15/03 at 1:39PM

all of 'em

Everything @ mwoodard.com, mwoody.com, and thetombs.com, I guess. Nothing is coming in with ***SPAM*** in front.

Posted by martin on 9/15/03 at 1:45PM

ok

see if it works now. It looks like I tried fixing it up before but somehow inserted the "vi" help text into your mail config file for the spam mail. heh.. bet that confused it..

Posted by matt on 9/15/03 at 3:04PM

Spam bounces

Brian, this has been happening to a lot of people all over the place. I had a lot of those a couple of weeks back, but not so much lately. If it's the same thing that happened to me, it'll pass in a few days.

Posted by bryce on 9/15/03 at 5:52PM

spam

matt:
Considering out of the 100+ bounces I've recieved, only 7 emails have originated at duplicate email addresses it's not that simple.

bryce:
I hope so... it's gettin freakin' annoying.

Posted by brian on 9/15/03 at 9:47PM

correction

not email addresses, SOURCE IPs

they're using rooted windows boxes across the Internet and the world to send this spam

Posted by brian on 9/15/03 at 9:47PM

more info

Posted by brian on 9/15/03 at 9:55PM

Wow, you win...

They just harvested my address off of Monster (monsterbrycekujala.com) and used that. It made it easy to filter so no one actually tries to hire me off of Monster. Well, unless sending me bounce messages was some weird interview question. Hmmm...

BTW, check out the new Thunderbird mail client from the fine folks that brought us Firebird. One of its coolest features is a learning spam filter. I haven't officially made the switch, but I've been digging it as I play around with it.

Posted by bryce on 9/15/03 at 11:05PM

SpamAssassin

Yeah, Matt, that fixed it. Thanks!

Posted by martin on 9/16/03 at 8:49AM

it's not Thunderbird or friends

it's the underlying engine... Netscape 7.1 (which I'm using at work) has it too

Posted by brian on 9/16/03 at 9:25AM

Too much spam info...

Man, that was way too much info on spam =)

Posted by jeff on 9/17/03 at 7:15AM

perhaps....

but it was very easy to produce those files

Posted by brian on 9/17/03 at 9:58AM

It's easy to induce vomiting.

It doesn't mean that I have to do it. =)

Posted by bryce on 9/17/03 at 10:56AM

no... but....

I DID have reasons for generating those files... it's just posting them that wasn't necessary.

Posted by brian on 9/17/03 at 2:05PM


Post comment:

Commenting disabled because this is an archive.

Valid HTML 4.01!

Valid CSS!