Jump to content


  • Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About markbuckles

  • Rank
  1. markbuckles

    spam Reporting?

    Is there a service that reports filtered spam like SpamCop? The services I've seen just have a spam folder that must be emptied, but with no reporting. Also, I am still unclear about SpamCop's service after the change: I understand that they will forward my incoming e-mail, and they say they will continue to filter it. Does that mean that they filter out and report the spam and forward on the legit e-mail only?
  2. markbuckles

    Seemingly Leaky Filter

    I do not understand - the other spam gets filtered into my Held Mail folder - why not the horseloverz.com spammer? If the filters did not work I should be getting tons of spam in my inbox. Thank you for the suggestion but I just want to understand why this spammer gets past my filter when other do not.
  3. markbuckles

    Seemingly Leaky Filter

    Thank you dbiel and turetzsr! dbiel: I access my e-mail by having my e-mail programme automatically and periodically download new mail from my SpamCop.net Inbox only. This works fine; most spam does not get delivered to my computer - it gets sent to the SpamCop Held Mail folder. Lately though, HorseLoverZ.com spam makes it through (other spammers do not). turetzsr: Thank you for the link; I do not have my own address whitelisted. My primary e-mail account forwards to my SpamCop account, then is downloaded to my computer. In my SpamCop account, I have all DNS Blacklists checked, SpamAssassin set at 1, and have made many filters over the years, such as the previously mentioned horseloverz.com specific filters. Again, those filters are: "if sender contains horseloverz.com send to Held Mail" ...but it kept getting in. So I added or "if source contains horseloverz.com send to Held Mail" or "if body contains horseloverz.com send to Held Mail" Sometimes SpamCop weeds out horseloverz, sometimes it lets it through. Here is the header for one that recently erroneously delivered to my Inbox (I used XXX for my addy): ----------------------------------------------- Return-Path: <email[at]mailer.horseloverz.com> Delivered-To: spamcop-net-XXX Received: (qmail 3003 invoked from network); 13 Nov 2011 22:27:20 -0000 X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on filter7 X-spam-Level: X-spam-Status: hits=0.8 tests=HTML_IMAGE_RATIO_02,HTML_MESSAGE,URIBL_GREY version=3.2.4 Received: from unknown ( by filter7.cesmail.net with QMQP; 13 Nov 2011 22:27:20 -0000 Received: from mail4c25.carrierzone.com ( by mxin2.cesmail.net with SMTP; 13 Nov 2011 22:29:04 -0000 Received: from chrome-twtwze.cccampaigns.net (chrome-twtwze.cccampaigns.net []) by mail4c25.carrierzone.com (8.13.6/8.13.1) with ESMTP id pADMRGau018792 for <XXX>; Sun, 13 Nov 2011 17:27:19 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=emv; d=mailer.horseloverz.com; h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe; i=email[at]mailer.horseloverz.com; bh=BfMhphfYHsuslkmU6G7OwP7kY3I=; b=djSSmcRLblbzmigeQ7tDgElrA+SN1j/1B1kv1Z0a/CpamQuRhTgA3U8g4xOReXGCWDRIeWPOY1EB 4FvRTCcv9Q== Received: by chrome-twtwze.cccampaigns.net id ho124e0hubc8 for <XXX>; Sun, 13 Nov 2011 23:27:00 +0100 (envelope-from <email[at]mailer.horseloverz.com>) Date: Sun, 13 Nov 2011 23:27:00 +0100 (CET) From: "HorseLoverZ.com" <email[at]mailer.horseloverz.com> Reply-To: "HorseLoverZ.com Customer Service" <customerservice[at]horseloverz.com> To: XXX <XXX> Message-ID: <11077107719.1274474.1321223220135[at]p2enginex2.emv2.com> Subject: Mane n' Tail Variety Pack with 8 Products, FREE Scoop ONLY $14.95 - Great Gift for the Holidays MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=127447411077107719 X-EMV-Platform: p2cce.campaigncommander.com$ X-EMV-CampagneId: 1274474$ X-EMV-MemberId: 11077107719$ List-Unsubscribe: http://p2tre.emv3.com/HD?a=ENX7CquysnHo8SA...qVsje_Hhe-unlLj X-MMR: 0 X-CSC: 0 X-CHA: v=1.1 cv=8XyDZAikrXz1kY29dwngsk+/ohyqDbPzEkDAPDdartA= c=1 sm=1 a=t-QZDxZ1rQYA:10 a=7+z6xUAKiXTCdJVUQ9cDEw==:17 a=kWGobBnVAAAA:8 a=8pQwB3h7AAAA:8 a=sGsLJnh1AAAA:8 a=ruG7H20Mwa3WOKRP9BEA:9 a=BGUWmSF0LJsFUsU0UtcA:7 a=PUjeQqilurYA:10 a=pR8iRiQCOkYA:10 a=B2id_1FGIicA:10 a=Rz-eOtO4RLYA:10 a=MeI69hvcc6wA:10 a=beIFczt1QKUA:10 a=pVUZFVzKAAAA:8 a=8QRNXwlP57v_I8yKmEAA:9 a=nHH2A627DjzZ9Jw_fVEA:7 a=tXsnliwV7b4A:10 a=9scftgM7MyoA:10 a=7+z6xUAKiXTCdJVUQ9cDEw==:117 X-SpamCop-Checked: X-EsetId: 2EA2B02805C37E6931A4B07A0E933339 --127447411077107719 Content-Type: text/plain; charset=iso-8859-15 Content-Transfer-Encoding: 8bit ----------------------------------------------- btw: when SpamCop reports horseloverz, it is always to a devnull: abuse#emailvision.com[at]devnull.spamcop.net I am not complaining about the SpamCop service - it catches the vast majority of spam - I like it very much; I am just curious as to how this particular spammer makes it over all the hurdles and into my Inbox. Prolly something simple that I have overlooked.
  4. My spamfilter is set up to send spam from horseloverz.com to my Held Mail folder, but it keeps getting into my Inbox. First I started out with "if sender contains horseloverz.com send to Held Mail" ...but it kept getting in. So I added or "if source contains horseloverz.com send to Held Mail" or "if body contains horseloverz.com send to Held Mail" ...but it keeps getting in. Why doesn't it get filtered? I don't even have a horse!
  5. markbuckles

    Spam Increase

    Okay - I think I figured out the tracking URL for a spam I got today: http://www.spamcop.net/sc?id=z1630446201z2...dc801ba30f0853z While I do expect some ebb-and-flow in the filtering process, the marked increase seemed beyond mere natural variance. In this one I got today, the subject was "All Natural Enlargement." I'd have thought that such would have been an easy catch for SpamCop.
  6. markbuckles

    Spam Increase

    I use SpamCop e-mail filtering service, and I usually get a spam or three a month that manage to sneak through into my Inbox. Lately (since about a week ago or so) I have been getting sometimes three a day. I have not changed any of my settings for months - I have all the Blacklists selected, and SpamAssin is selected and set at 1. Sorry - I don't know how to retrieve report info or tracking data, but I uploaded two example spams that I received today (with complete headers) to my website: http://www.markbuckles.com/misc/spam.txt Can anyone see any reason for the recent uptick in spam slipping through? Thanks!
  7. markbuckles

    Spam Getting Through

    I don't know what a "Tracking URL" is - please explain. Thanks! note: the link I provided is to a GIF screenshot on my personal website of the spam referenced in my original post. I used the TinyUrl.com shortening/forwarding system out of habit. The exact URL is http://www.markbuckles.com/misc/spam.gif Is that okay?
  8. I usually get one or two spams a week that make it through my SpamCop e-mail account into my inbox - the great majority (about 100 to 150 a day) are filtered into my hold-file where I report them. Lately the frequency of spam slipping through has increased. Today I got six. The subject line of one was "Produce Stronger and Rock Hard Erections", another was "*Curso de Pilates en su casa". Full header and text of "Produce Stronger..." spam here: http://tinyurl.com/y29rdx The sender is not on my white-list. I would think that such spam should have been easy to catch. I have not changed any settings on my account; I have all the blacklists selected, and SpamAssasin is set to 1. Why is more spam getting through? Is there something I can do to improve the filtering? Thanks! Best Regards, Mark Buckles San Diego
  9. markbuckles

    Filters Started Leaking

    I saw that, but did not understand why you included the Whitelist reference - as I mentioned: I am no expert at this (shoulda said I am pretty clueless). So I will de-Whitelist myself (not sure why I did it to begin with; I may have copied a whitelist fom my local settings). Thank you for your assistance!
  10. markbuckles

    Filters Started Leaking

    Yeah, SpamPal in on my computer (local), not on SpamCop (server); it handles e-mail after it is downloaded from SpamCop. I am certainly no expert at this and didn't want to alter the headers, so I posted the messages in their entirety. So this still leaves the question: why has spam started seeping through? Is there a way to install additional filters on the SpamCop server?
  11. I've made no recent changes to my SpamCop e-mail account filter settings, but as of Friday 16 June, I have started receiving spam of the sort that usually gets caught. I have all the DNS Blacklist selections checked, and I have SpamAssassin limit set at one. Here are the source views for the spam I got this weekend: http://www.markbuckles.com/misc/spam.htm Why has this started happening?
  12. Under Maintenance Operations, I have the Trash Folder set to be purged after one day, and for maintenance operations to be performed upon login, but the trash file never gets purged. Is there some other setting I missed that must be selected? Thanks, Mark Buckles San Diego