Subject:
|
Re: Still spammin!
|
Newsgroups:
|
lugnet.admin.general
|
Date:
|
Thu, 1 May 2003 10:11:49 GMT
|
Viewed:
|
379 times
|
| |
|
|
In lugnet.admin.general, Dan Boger writes:
> On Wed, Apr 30, 2003 at 01:05:33PM +0000, Dave Schuler! wrote:
> > Someone recently noticed that address lists appear to have been harvested
> > from LUGNET's posting roster. I applaud with delight the recent
> > spamproofing feature in the email address! Sadly, it seems that some finks
> > still have lists from prior to this enhancement.
>
> sorry to say, but those emails already harvested will never stop getting
> spam now. Your only option is to abandon that address, and start a new
> (Safe) one.
>
> Or, just install really good spam filters, like spamassassin. :)
>
> Dan
What is a safe address? My "safest" address is one that actually contains
the word NOSPAM. :) So far, the harvesters have filtered out that one...
Today is the last day of my 30 days evaluation period of McAffe's
SpamKiller. I must say I'm not at all pleased with it. First of all, a
product from McAffe(!) has let all "MS security packs" pass through, except
today's. and here's the reason it killed this one: "X-SpamKiller-Reason:
Message text contains 'hgh'". Oh dear.
Looks like the spammers have all the antispam tools with the latest updates,
and all the time adjust their spams to pass through the filters. In the
beginning of the trial period, I wrote a "semi-bug report" to the McAfee
staff and complained about I was unable to add a filter "subject contains '
'" (8 blanks). By that time, at least one of three spams could be filtered
out this way. I think McAfee added such a filter in their next update.
Today, not even a month later, spams with lots of blanks in the subject are
very rare...!
A comical thing about SpamKiller is that it killed a couple of newsletters I
actually prescribe. The reason is that their text contains the harmless word
'slut' that you may have seen at the end of any Swedish movie. It simply
means '[The] End', and is also part of 'finally' and 'at last' in Swedish... :)
I like the freeware Email Control better, but unfortunately it doesn't work
100% properly. Even though I have checkboxed a condition to 'automatically
delete on server', it doesn't. :( Otherwise it is very good.
So, it's time to give SpamAssassin a try. If this doesn't work satisfactory,
I guess I'll have to try to write my own spamkiller the way I want it. :/
I would like a program that first kills all obvious spams by just analyzing
theier headers, and then checks the text of only those passed through the
first filter.
Below is the header of the latest Lugnet related spam/virus message I
recieved. I tried to corrupt the addreeses to make it a little more
difficult for other harvesters to pick them up.
Return-Path: <sfdlc&sympatico.ca>
Received: from tomts12-srv.bellnexxia.net ([209.226.175.56]) by
fep21-svc.swip.net with ESMTP id
{20030501030813.QFNJ27035.fep21-svc.swip.nat&tomts12-srv.bellnexxia.net} for
{tore.eriksson&mbox325.swipnet.swe}; Thu, 1 May 2003 05:08:13 +0200
Received: from M04369 ([64.228.160.27]) by tomts12-srv.bellnexxia.net
(InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with SMTP id
{20030501030659.VAEC19609.tomts12-srv.bellnexxia.net&M04369}; Wed, 30 Apr
2003 23:06:59 -0400
Reply-To: <sfdlc&sympatico.ca>
From: "Sylvain Le Cavalier" <sfdlc&sympatico.ca>
To: {mikehorvath&juno.kom}, {jameson&jamesonrobert.kom}, {alano&kiva.nat},
{skurt&vip.cybercity.dan}, {dcpyatt&netzero.nat}, {jkgii&aol.kom},
{chris_w_dee&hotmail.kom}, {chucks&he.nat}, {mouser_x&hotmail.kom},
{foofoogood&hotmail.kom.die_evil_unsolicited_e-mail},
{aulddragon&wamalug.ogr}, {dmglego&yahoo.kom}, {foofoogood&hotmail.kom},
{hpatey&nfld.kom}, {tore.eriksson&mbox325.swipnet.swe},
{fredrik.glockner&bio.uio.ohno}, {fwcain&yahoo.kom}, {tburger666&aol.kom},
{shakguy&hotmail.kom}, {johannes&nada.kth.swe}, {jamien&interworx.kom.au},
{3nelsons&pressenter.kom}, {sparre&sys-323.risoe.dan},
{john_vanzwieten&msn.kom}, {cwalton&istar.ka}, {hywang&pobox.kom},
{dragonelf1&aol.kom}, {dnjhess&zdnetmail.kom}, {hmillington&cix.ko.uk},
{gregw&mindspring.kom}, {legoverse&geocities.kom},
{john_vanzwieten&email.msn.kom}, {wilsonj&xoommail.kom}, {braml&juno.kom},
{dennett&agate.nat}, {kingsley&nelug.ogr}, {jsproat&io.kom},
{blisses&worldnet.att.nat}, {gasperi&alynk.kom}, {moquind&neca.kom},
{kloch&opnsys.kom}, {deaton&intdata.kom}, {borovoy&media.mit.edy},
{suz&media.mit.edy}, {hetling&ll.mit.edy}, {sullis3&mit.edy},
{wpieaton&wpi.edy}, {kloch&nospmkl.nat}, {lehman&javanet.kom},
{lpieniazek&novera.kom}, {lar&voyager.nat},
{chris.phillips&computerboards.kom}, {mattdm&mattdm.ogr},
{socalray&earthlink.nat}, {kencef&hotmail.kom}, {james&vci.nat},
{bram&po.cwru.edy}, {dnvpark>e.nat}, {mike_walsh&mindspring.kom},
{sebarile&sstanamera.kom}, {razoredge442&aol.kom}, {srosez&hotmail.kom},
{datafx7&yahoo.kom}, {thomas.avery&intec-hou.kom},
{ashley.glennon&mindspring.kom}, {jimmyfigiel&yahoo.kom},
{rcrawford&csi.kom}, {legosapiens&hotmail.kom}, {sink&countersinkdg.kom},
{jedi_agh&yahoo.kom}, {eric&reasoning.kom}, {mylegomaster&cs.kom}
Subject: FW: Take a look at the correction security pack which came from
Microsoft
Date: Wed, 30 Apr 2003 23:01:01 -0400
Message-ID: {001701c30f8d$e5f7e620$80a0e440&clarica.com}
MIME-Version: 1.0
Content-Type: application/x-msdownload; name="q354322.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="q354322.exe"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
|
|
Message is in Reply To:
 | | Re: Still spammin!
|
| (...) sorry to say, but those emails already harvested will never stop getting spam now. Your only option is to abandon that address, and start a new (Safe) one. Or, just install really good spam filters, like spamassassin. :) Dan (22 years ago, 30-Apr-03, to lugnet.admin.general)
|
9 Messages in This Thread:
 
  
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
