Jump to content

michaelanglo

Membera
  • Content Count

    288
  • Joined

  • Last visited

Everything posted by michaelanglo

  1. michaelanglo

    Yahoo spam

    And Spamcop has a conceptual problem, as I have suggested several times over the years, in that it can only report (mostly) about one "source" So suppose a Yahoo or other webmail account that is used to send spam by a person in an internet cafe. You really want to report to the Cafe's ISP AND to the webmail abuse addie whose servers sent the spam but correctly (SC "trusted relay") reports the originator's IP address. SC can only do one of these and chooses the latter. The "envelope sender" is just as easily forged - the only thing that can be relied on is the IP address that is doing the sending and which appear in the Received: header line
  2. No such need in the instant case since SC reports that IP address as being on the SCBL and the report history shows the Spammy subjects and mentions spam trap hits. Here's similar data for a different IP address, 6 days old, also collaborationhost.net http://spamcop.net/w3m?action=checkblock&a...p=216.166.12.97 If there are no reports of ongoing objectionable email from this system it will be delisted automatically in approximately 13 hours. X-SpamCop-Checked: 64.88.168.84 62.24.139.64 62.24.139.126 8.5.124.4 216.82.242.115 216.166.12.97 X-SpamCop-Disposition: Blocked bl.spamcop.net Using best contacts abuse[at]datafoundry.com Statistics: 216.166.12.97 listed in bl.spamcop.net (127.0.0.2) == Submitted: Wed Jun 8 14:51:17 2011 GMT : Job Offer 5528577466 ( 216.166.12.97 ) To: abuse[at]datafoundry.com Submitted: Wed Jun 8 13:12:09 2011 GMT : YOUR DIPLOMAT HAS NOW ARRIVE AT Louisville International Airport,CONTACT HIM ... 5528428169 ( 216.166.12.97 ) To: abuse[at]datafoundry.com == What other evidence
  3. Have you selected greylisting for your Spamcop account ? If so you might see something like that.
  4. POP working within the last ten minutes, VER cannot connect
  5. michaelanglo

    Secure your router ...

    Has anyone done a survey and posted numbers ? I have recently acquired a Kindle 3G which will scan for Wi-Fi if asked or when there is no 3G/ GPRS/ EDGE signal. Every time it has done so it showed 3-10 networks, but every network passworded.
  6. michaelanglo

    [Resolved] Filtering by character set

    Already added. "Blocked Russian" - see the Spamcop Mail manage block lists for the box to tick.
  7. michaelanglo

    Brazil filters not working?

    In fact for the past several years the order has been SpamAssassin Block lists and Blocked Russian Personal Blacklists The difference is that the X-SpamCop-Disposition: Blacklist xx still appears in the headers even if SA triggers "held" but only if SA doesn't trigger is the blocklist look up done.
  8. michaelanglo

    Brazil filters not working?

    No increase here but I've been getting it for ten years, even political spam. Can I suggest adding "br" (without the quotes) to your Spamcop Mail personal blacklist ?
  9. michaelanglo

    Easiest Seed Crackers

    Easiest Seed Crackers - the lazy way. Preheat oven to 350 F 180 C Gas mark 4 1/2 C (70g) self raising flour 1/4 tsp baking powder 1/4-1/2 tsp herbs/ spices (I used herbs de provence and cumin). 1/2 C (65g) seeds (sunflower, sesame, flax, pumpkin, etc.), 1/8 C (32g) sunflower oil 1/4 C (100g) water Mix in a bowl, except for the water, until well combined.. Add the water while stirring to make a thick batter. Divide between two greased 9 inch (20 cm) round or square tins, smooth and cook for about 40 minutes or until fairly crisp and brown at the edges. Cool for 5 minutes then cut into segments before cooling on a wire rack. Mine were 0.5 cm (0.25 inch) thick after cooking. I used sunflower and poppy seeds.
  10. michaelanglo

    help with italian isp

    You could try sending your mail using Gmail but keeping your current email address and inbox for replies. This is fully supported by Google.
  11. michaelanglo

    Drop in usage

    Yes, TalkTalk seems to be using IronPort too. X-IronPort-Anti-spam-Filtered: true X-IronPort-Anti-spam-Result: AggBANfCskzCgd3hmWdsb2JhbAChOmgBAQIBCAsKBxEiwQyFSASFJw X-IronPort-AV: E=Sophos;i="4.57,314,1283731200"; d="scan'208";a="114811230" == Bit TalkTals's attempt to integrate various legacy boxen seem to have resulted in no off switch and no 'held' folder, suspected spam is just dropped. http://www.ispreview.co.uk/story/2010/10/1...-customers.html http://www.talktalk.co.uk/forums/showthread.php?t=181553 == Further, the added servers to do the IronPort filtering are on the PBL block list thus rendering PBL quite useless to users of SpamCop Mail. http://www.senderbase.org/senderbase_queri...g=62.24.139.126 http://www.senderbase.org/senderbase_queri...ng=62.24.139.64 Ah well, still have other e-addies.
  12. michaelanglo

    Drop in usage

    Just as an amusing tale, my spam reporting may drop a lot. Because spam received is way down 6 in the last three days instead of my usual (average last month was 75/day). I suspect TalkTalk has installed a new spam filter for former Tiscali clients. No obvious missing emails yet.
  13. michaelanglo

    Mail being blocked and bounced

    As a fix, why not open a gmail account and have the emails from Yahoo sent to it ? Gmail could be accessed direct or could forward to your current mailbox.
  14. michaelanglo

    NULL messages in held mail???

    The error quoted it from VER or course. Either go into webmail, choose the 'held' folder and open the spam email then click 'original message' which can be copy/ pasted to the submit page as normal. OR do a VER "release but don't whitelist" which puts it in your inbox whence it can be reported in the normal way. The usual problem is not malformed headers as such but that From: and/or Subject: are missing (I don't mean blank) a long running series always has a '[' in the message-id.
  15. A reasonably harmless email from a credit card provider triggered a False Positive from SpamAssassin X-spam-Status: hits=3.2 tests=FRT_ROLEX,HTML_IMAGE_RATIO_08,HTML_MESSAGE, RDNS_NONE version=3.2.4 Here is your TRACKING URL - 14:37 04Aug10 http://www.spamcop.net/sc?id=z4339877073z7...620a470b451eb5z Googling suggested that some trigger word was being spelt out in HTML but I don't see Rolex anywhere so is it some other, say 'Mercury' ????
  16. { phrase: ultimate rock 'n' roll experience } Thank you. Must avoid ROTFLOL experiences too perhaps ?
  17. michaelanglo

    Is it appropriate...

    Doesn't matter, the question is whether the registration request is a real one and if so whether the rules of ICAN (sp?) local law or good practice require the "advice". IIRC if company.co.hk includes a trademark the registrant can be forced to disgorge. I would suspect the actual sender would not be the registrar but someone running an advanced fee scam. It might be worth a check to see whether company.co.hk etc was in fact registered by some hopeful person.
  18. As I said I do exactly that "I currently use this technique to show me all Held emails which {a} that have low SpamAssassin scores and thus also those that a Block list or Blocked Russian or a personal black list has stopped. ..." looking at:- http://forum.spamcop.net/forums/index.php?showtopic=10163 == begin copy If you search the Held folder for whole of message contains "hits=5. OR hits=4. OR hits=3. OR hits=2." and save the search as virtual folder box then you would see just the likely items that should not be in Held. with very little trouble. (This is the header line X-spam-Status: hits= but Search doesn't seem to work to find a target with embedded spaces so I just used the hits= segment) == end copy Note that this SA line can be missing, ie for very big emails, so "no find" should be included in the suspicious list. HTH
  19. Now you give more detail I do recall that when I was developing search recipes and saving with a new name so I could go back and reinstate a section I had removed I found some weird things happening when I used the same name as several steps ago. Perhaps the old contents could reappear ? The designer may not have got the logic right for a virtual folder name that already existed ? Anyway I changed to using a unique name from then on and deleted the old name before using it again and had no more trouble. As I said, once the virtual folder was in the list, all was safe.
  20. I have virtual folders more than a year old which show no sign of vanishing. http://forum.spamcop.net/forums/index.php?showtopic=10163 I think that 'virtual' here means there is no actual folder but instead the recipe (saved search) is remembered. Note that folders or virtual folders can be accessed from either the Folders menu item or the Open Folder pull down. quotes from Horde Help === Virtual Folders: Virtual Inbox Virutal Inbox is a saved search that does away with the need to search every mailbox for messages marked as new. Instead, all currently subscribed mailboxes are searched for new messages and the results are displayed in a single mailbox. Virtual Folders: Virtual Trash Virtual Trash is a saved search that does away with the need for a separate Trash folder. Instead of moving messages to a centralized trash folder, messages are simply marked as deleted in the current folder they live in. When 'show deleted messages' is turned off, this results in these messages not appearing in a mailbox view. When a user clicks on Virtual Trash, *all* mailboxes all searched for messages that are flagged deleted and these messages are displayed in a single mailbox. Also Options Server and Folder Information Display Virtual Inbox? checkbox end quotes ===
  21. waugh's original post suggested the use of SC Webmail's tool 'filter' With no enhancements this would require Procedure 1 go to Inbox or held mail Filter all containing /something/ move to folder name1 go to folder name1 select all emails report {selected} as spam There is an alternative using the SC Webmail's tool 'search' search selected folders for /something/ Save the search as virtual folder vname1 Procedure 2 Subsequently just go to vname1 select all emails report {selected} as spam which is one or two steps less and more flexible. -- Wandering from the topic a bit but still on "how I use SC Webmail" I currently use this technique to show me all Held emails which {a} that have low SpamAssassin scores and thus also those that a Block list or Blocked Russian or a personal black list has stopped. I can thus review what may need more attention I have a search {b} which is the inverse of this to show me only those held emails not in {a} which get only a rapid scan. Of a day's 100 odd Spams, 88 are in {b}, 12 in {a} and 1 to 4 leakers in my inbox.
  22. michaelanglo

    New Spamcop Phishing

    The SpamCop webmail A/V was altered some years back to silently discard anything it found. This followed a period where floods of notification emails were just as much trouble as the viruses themselves. SpamCop webmail tried restoring the notification at least once but the flood problem proved intractable. So if any viruses are being caught by SpamCop mail, sorry, you are not told.
  23. michaelanglo

    Seasonal Food

    Flapjacks 1 cup / 110g / 4oz butter (or margarine) 1/3 cup / 50g / 2oz Demerara or light brown sugar 2 Tbsp / 30g / 1.5oz golden syrup (light corn syrup) or maple syrup 2 1/4 cups / 225g / 8oz rolled oats As a variation add a some or all of :- a little dried fruit, 1/2 tsp ground ginger, 1/4 tsp ground mixed spice. If you like it stickier, double the sugar and increase the fat and syrup by 50%. Preheat oven to 180 C 350 F mark 4 Warm the butter, sugar and syrup in a saucepan until the fat and sugar have just melted ( or place in a microwavable glass bowl and microwave on High for about a minute). add the rolled oats and mix thoroughly. Grease a shallow baking tray (20 cm / 8in square sandwich tin), spoon in the mixture and spread flat with spoon or a palette knife Bake for about 30 minutes or until a even golden brown. Mark into 12 portions after cooling in the tin for about 5 mins and remove when just cool. Stores well in a airtight tin.
  24. michaelanglo

    User has no idea why he/she is here

    Looking at the national locations of the ISPs to whom I report my leaked spam, this is not so. At least half are in in parts of the world where I have no or only one correspondent - the whole of Latin America for example. So if SpamCop mail let me select block lists for every country, not just China, Braxil etc I could improve my spam filtering a good deal at the expense of having to fish the occasional Ham email out of held mail from a travelling friend who I haven't whitelisted.
  25. POP of Spamcop Mail and its POP of other mail accounts is working and I have mail that arrived within the last 4 hours, 17:30 GMT Can't see what's in the Held folder of couse.
×