Re: Avalanche of SPAM

I have probably received close to two dozen of these messages from "US NMA" in the past week or two. It appears that the subject line does not change, so I think your solution is valid. I'm also seeing other spam recently that appears to be sent by senders with valid e-mail addresses and which respond to challenge messages.

I'm thinking of abandoning the reply function and requiring senders to visit the web site to validate with a URL instead.


----- Original Message ----
From: Keith Roberts <[email protected]>
To: [email protected]
Sent: Saturday, July 7, 2007 8:37:34 AM
Subject: Avalanche of SPAM


Hi. Here are a few excerpts from my incoming log - tmda 
1.0.3.

Date: Sat Jul 7 05:09:40 BST 2007
From: US NMA <[email protected]>
   To: [email protected]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[email protected])(6148)

Date: Sat Jul 7 05:09:44 BST 2007
From: US NMA <[email protected]>
   To: [email protected]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[email protected])(6147)

Date: Sat Jul 7 05:09:46 BST 2007
From: US NMA <[email protected]>
   To: [email protected]
Subj: The United States National Medical Association
Actn: DELIVER (headers-file 
/home/keith/.tmda/filters/subject_reject 
[email protected])(6135)

Anyone else getting this avalanche? My solution was to add 
the following line to my incoming filter file, after 
checking for mail I want to accept:

# unacceptable regex matches for Subject: mail header field
headers-file ~/.tmda/filters/subject_reject
[email protected]

and in the subject_reject file add the following regex line 
to match:

"The United States National Medical Association"

It seems that blocking spam on the From: address hardly 
works, as the from address keeps changing, whereas the 
subject line is alot more constant.

HTH

Regards

Keith

------------------------------------------------------------
http://www.karsites.net
http://www.raised-from-the-dead.org.uk

This email address is challenge-response protected with
http://www.tmda.net

**Report Spam To One Place**

We at FixingEmail.org are putting together a list of email 
addresses to which we will forward all spam from a single 
address. The idea being that rather than just deleting your 
spam, you can also quite easily forward it to 
[email protected] knowing it will automatically forward 
to all the email addresses taking spam collections.

http://www.fixingemail.org

------------------------------------------------------------
_____________________________________________
tmda-users mailing list ([email protected])
http://tmda.net/lists/listinfo/tmda-users


       
____________________________________________________________________________________
Get the free Yahoo! toolbar and rest assured with the added security of spyware protection.
http://new.toolbar.yahoo.com/toolbar/features/norton/index.php