Jump to content
Sign in to follow this  
Kenton

Huge increase in unfiltered job ad spam

Recommended Posts

Hi

I am getting a huge number of spam (exactly the same message) not being filtered from no-reply999[at]job.com and after I report it I get it again from a bunch of my own email addresses:

Return-Path: <no-reply155[at]job.com>

X-Original-To: {MUNG}

Delivered-To: x11446691[at]homiemail-mx22.g.dreamhost.com

Received: from c60.cesmail.net (c60.cesmail.net [216.154.195.49])

(using TLSv1 with cipher RC4-SHA (128/128 bits))

(No client certificate requested)

by homiemail-mx22.g.dreamhost.com (Postfix) with ESMTPS id C578D200092

for {MUNG}; Mon, 14 Feb 2011 02:45:13 -0800 (PST)

Received: from unknown (HELO filter8.cesmail.net) ([192.168.1.218])

by c60.cesmail.net with SMTP; 14 Feb 2011 05:45:12 -0500

Received: (qmail 6402 invoked by uid 1010); 14 Feb 2011 10:45:11 -0000

Delivered-To: {MUNG}[at]spamcop.net

Received: (qmail 6335 invoked from network); 14 Feb 2011 10:45:05 -0000

X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on filter8

X-spam-Level: *

X-spam-Status: hits=1.7 tests=HTML_MESSAGE,MIME_HTML_ONLY version=3.2.4

Received: from unknown (192.168.1.86)

by filter8.cesmail.net with QMQP; 14 Feb 2011 10:45:05 -0000

Received: from caibbdcaaaaf.dreamhost.com (HELO homiemail-mx23.g.dreamhost.com) (208.113.200.5)

by mxin2.cesmail.net with SMTP; 14 Feb 2011 10:49:03 -0000

Received: from [62.244.131.47] (unknown [62.244.131.47])

by homiemail-mx23.g.dreamhost.com (Postfix) with ESMTP id 67FF93E03A4;

Mon, 14 Feb 2011 02:45:03 -0800 (PST)

From: no-reply222[at]job.com

To: <{MUNG}>

Subject: We need you. Now taking applications!

MIME-Version: 1.0

Importance: High

Content-Type: text/html

Message-Id: <20110214104503.67FF93E03A4[at]homiemail-mx23.g.dreamhost.com>

Date: Mon, 14 Feb 2011 02:45:03 -0800 (PST)

X-SpamCop-Checked: 208.113.200.5 62.244.131.47

Why are all these not being stopped? They're pretty much the same content by 20 per day.

Share this post


Link to post
Share on other sites
I am getting a huge number of spam (exactly the same message) not being filtered from no-reply999[at]job.com and after I report it I get it again from a bunch of my own email addresses:

Why are all these not being stopped? They're pretty much the same content by 20 per day.

As a Tracking URL was not provided, there's a question of whether what you copied and pasted includes 'everything' .... The phrase tagged in red above suggests that you've whitelisted your own addresses, but that would normally also be shown within the headers.

Share this post


Link to post
Share on other sites

If you put job.com on your SpamCop blacklist, the filters will catch those spams.

Also, make sure that your own email addresses are not on your SpamCop whitelist. And, if you don't send mail to yourself regularly, it would ge a good idea to put your own email addresses on your blacklist, too.

- Don D'Minion - SpamCop Admin -

- service[at]admin.spamcop.net -

.

Share this post


Link to post
Share on other sites

OK Thanks

I've blacklisted job.com as well as a bunch of my own email addresses (postmaster[at], info[at], bookings[at] etc etc) and we'll see how we go.

As to whitelisting my own names, yes I found 2 of them whitelisted and removed them.

Thanks

Share this post


Link to post
Share on other sites
As to whitelisting my own names, yes I found 2 of them whitelisted and removed them.

The whitelisting is the most likely reason you were getting stuff that should have been caught. You'll want to keep a close eye on your trapped spam now that you have blacklisted some of your own addresses to ensure you don't end up reporting legitimate Emails

Andrew

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×