[prev in list] [next in list] [prev in thread] [next in thread] 

List:       razor-users
Subject:    RE: [Razor-users] Help!  I'm getting over 20MB of Spam a day! {Sc
From:       "Furnish, Trever G" <TGFurnish () herff-jones ! com>
Date:       2003-10-07 18:50:48
Message-ID: 8FFC76593085ED4A80D3601BC41EFCDF8E1D00 () inex1 ! herffjones ! hj-int
[Download RAW message or body]

Um, the concept is correct - you'll be better off if you can block at the
MTA level - but the implementation recommended doesn't do that.  MailScanner
only touches messages *after* they've been accepted by the MTA.  A
milter-based tool, such as MimeDefang, will hook into the MTA to allow
rejection of the message before it's accepted in many cases, and before it's
written to disk in most cases.  I think MailScanner is great - I use it -
but it doesn't work at the MTA level.

> -----Original Message-----
> From: Youn Gonzales [mailto:ispmgr@clas.net]
> Sent: Tuesday, October 07, 2003 12:02 PM
> To: ama-list@mltp.com; Vipul's Razor SPAM e-mail list
> Subject: Re: [Razor-users] Help! I'm getting over 20MB of Spam a day!
> {Scanned by HJMS}
> 
> 
> Block the messages at the MTA - ie before spamassassin is 
> called or virus
> scan your email first using something like MailScanner (it is free)-
> http://www.mailscanner.info.
> 
> Youn Gonzales
> System Administrator
> Comptia A+, Network+, INET+,
> Cisco CCNA/CCDA Certified Technician
> Microsoft Certified Professional
> 
> I have an existential map; it has you are here written all over it.
> - Steven Wright
> 
> ----- Original Message ----- 
> From: "Aurangzeb M. Agha" <ama-list@mltp.com>
> To: "Vipul's Razor SPAM e-mail list" 
> <razor-users@lists.sourceforge.net>
> Sent: Tuesday, October 07, 2003 9:11 AM
> Subject: [Razor-users] Help! I'm getting over 20MB of Spam a day!
> 
> 
> > I'm at a point of desperation.
> >
> > I'm getting over 20MB of Spam a day, all from what seems to 
> be the same
> > entity.  The headers of each e-mail are different, but look 
> similar to
> > this:
> >
> > Return-Path: <mrblock@gisco.net>
> > Received: from web05.bigbiz.com (web05.bigbiz.com [216.218.198.5])
> >         by cinemaspace.berkeley.edu (8.12.8/8.12.8) with ESMTP id
> > h97DuWNm029289
> >         for <aagha@cinemaspace.berkeley.edu>; Tue, 7 Oct 
> 2003 06:56:32
> > -0700
> > Received: (from missinglinktech@localhost)
> >         by web05.bigbiz.com (8.8.7/8.8.7) id GAA01945
> >         for aagha@cinemaspace.berkeley.edu; Tue, 7 Oct 2003 
> 06:57:26 -0700
> > Received: from mail.gisco.net (mail.gisco.net [64.19.76.64])
> >         by web05.bigbiz.com (8.8.7/8.8.7) with ESMTP id GAA01922
> >         for <ama-misc@mltp.com>; Tue, 7 Oct 2003 06:57:21 -0700
> > Received: from ukeanorh [64.19.81.23] by mail.gisco.net
> >   (SMTPD32-8.02) id A5CA5A1500D4; Tue, 07 Oct 2003 09:55:22 -0400
> > FROM: "Microsoft Network Security Department"
> > <rrnflvlcwr_fwxx@technet.ms.com>
> > TO: " " <client@technet.ms.com>
> > SUBJECT: Newest Update
> > Mime-Version: 1.0
> > Content-Type: multipart/mixed; boundary="suckbugsnimmxzw"
> > Message-Id: <200310070955891.SM03064@ukeanorh>
> > Date: Tue,  7 Oct 2003 09:57:21 -0400
> > X-Spam-Status: No, hits=1.7 required=5.0
> >         tests=ALL_CAPS_HEADER,BALANCE_FOR_LONG,SMTPD_IN_RCVD
> >         version=2.44
> > X-Spam-Level: *
> > X-Pyzor: SPAM
> > Parts/Attachments:
> >    1.1.1   OK     ~40 lines  Text
> >    1.1.2 Shown   ~158 lines  Text
> >    1.2     OK     3.7 KB     Image
> >    1.3     OK     370 bytes  Image
> >    2              109 KB     Application
> > ----------------------------------------
> >
> > I'm using SpamAssassin and can successfully filter 98% of 
> this to a SPAM
> > folder, but it just keeps coming and coming and coming.  
> It's been going
> > on for over a month now, and the volume seems to be increasing, not
> > decreasing!
> >
> > Since each header is different, I can't even figure out who 
> the SPAM is
> > from, or what I should do about it?  I'm constantly using 
> SpamAssassin to
> > report to Razor, DCC, and Pyzor, but it's not helping.
> >
> > Anyone have ANY idea on what I can do to stop this deluge?
> >
> > Please help!
> >
> > Thanks,
> > Zeb
> >
> >
> > -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Razor-users mailing list
> > Razor-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/razor-users
> >
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Razor-users mailing list
> Razor-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/razor-users
> 


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users

[prev in list] [next in list] [prev in thread] [next in thread]