[Resolved] joe.blow[at]spamcop.net XX% off Pfizer Viagra, Too much now

[inom234]

I am receiving about 10 spam messages a day to my spamcop email address. How is it that they are not being filtered out by spamcop?

I have all of the spamcop detection options on. The email always links to Chinese sites i.e.

http:// www.humohvw.cn/1.gif

rojawsh.cn/

053dc4.lipayhw.cn/

It has been a few weeks now that I have been getting a 5-10 a day.

I also use MailWasher and all of the Vigra / Pfizer posts are detected by MailWasher (usually by Spamhaus). Why not Spamcop...??

Any help Spamcop can offer? Would like them to stop.

Regards

"I hate spam"

[Edit: live link to known spam payload site broken]

[Farelf]

The 'hot' sites list of what reporters are seeing at any given time is shown at http://www.spamcop.net/w3m?action=inprogress;type=www

The cycle time is fairly short, so I guess that page should be showing emerging trends more than long-term, relatively low volume pests and exploits. Some of that is picked up in the SURBL which keeps a database and is accordingly longer-term. The lookup page is http://george.surbl.org/lookup.html. The three domains you are surveying are all shown as currently listed there.

Discussion on filtering, greylisting, etc. would be better carried out (and/or researched) in the SpamCop Email System & Accounts forum. I guess you wanted a wider base for your survey? (I predict 100% 'No' - but if you're quick enough you can edit the poll to insert a 'Yes' selection). But if you just want to keep spam out of your inbox (as do we all) you need to be looking at/talking about your filters and you should lead by talking about your current selections and settings. Or, greylisting should stop most of it without further work on your part though I can't talk from personal experience, not being a mail system user.

[Wazoo]

In addition to Farelf's suggestions, I'll add the request for a Trackng URL or two. Not much fun trying to talk about "a spam" if no one else can actually see "the spam" in question. There may be the needed data within in a displayed data-set.

You made no mention of 'how' you've configured your e-mail receiving and reporting modes .... for example, is it possible that these specific e-mails are being forwarded from another acoount that you have identified in your whitelist?

[inom234]

I have moved this thread to this forum as suggested.

I am receiving about 10 spam messages a day to my spamcop email address. How is it that they are not being filtered out by spamcop?

I have all of the spamcop detection options on (see below). The email always links to Chinese sites i.e.

http:// www.humohvw.cn/1.gif

rojawsh.cn/

053dc4.lipayhw.cn/

It has been a few weeks now that I have been getting a 5-10 a day.

I also use MailWasher and all of the Vigra / Pfizer posts are detected by MailWasher (usually by Spamhaus). Why not Spamcop...?? I have Spamhaus filter on.

Any help Spamcop can offer? Would like them to stop.

My Settings

Greylisting is ON

SpamCop Blacklist ON

Spamhaus Blacklist ON

South Korea (the country) ON

China (the country) ON

Nigeria ON

Argentina ON

Brazil ON

Composite Blocking List ON

Spamhaus XBL ON

Any help Spamcop can offer? Would like them to stop. Have i missed a setting?

Regards

"I hate spam"

Moderator Edit: Merged original Topic made in the Lounge area into this Topic. Poll will be deleted.

[Wazoo]

Stll looking for a Tracking URL or two.

[inom234]

Hi -

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

Is there something I need to set up... Many thanks

I have edited my email address to show MY.EMAIL not my real email.

From: VIAGRA ® Reseller <MY.EMAIL[at]spamcop.net>

To: MY.EMAIL[at]spamcop.net

Subject: Member MY.EMAIL[at]spamcop.net get 81% 0FF on ALL Pfizer

MIME-Version: 1.0

Content-Type: text/html; charset="WINDOWS-1252"

Content-Transfer-Encoding: 7bit

X-Antivirus: avast! (VPS 091103-1, 11/03/2009), Outbound message

X-Antivirus-Status: Clean

X-SpamCop-Checked:

X-SpamCop-Disposition: Blocked SpamAssassin=16

X-SpamCop-Whitelisted: M Y.E M A I L[at]spamcop.net

[petzl]

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

Yes remove it (The Whitelist only looks at the FROM address)

[agsteele]

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

As petzl has observed, you should not have your own Email address in your whitelist. Spoofing your own address is one of the most common ways spammers use to overcome spam filtering.

Andrew

[Wazoo]

Tagging this as Resolved. Deleting yet another Topic starting Post, as it's a duplicate of the 'moved' Post within this Topic.

[inom234]

Tagging this as Resolved. Deleting yet another Topic starting Post, as it's a duplicate of the 'moved' Post within this Topic.

Thanks for the help all....