Jump to content

[Resolved] joe.blow[at]spamcop.net XX% off Pfizer Viagra, Too much now


inom234
 Share

Recommended Posts

I am receiving about 10 spam messages a day to my spamcop email address. How is it that they are not being filtered out by spamcop?

I have all of the spamcop detection options on. The email always links to Chinese sites i.e.

http:// www.humohvw.cn/1.gif

rojawsh.cn/

053dc4.lipayhw.cn/

It has been a few weeks now that I have been getting a 5-10 a day.

I also use MailWasher and all of the Vigra / Pfizer posts are detected by MailWasher (usually by Spamhaus). Why not Spamcop...??

Any help Spamcop can offer? Would like them to stop.

Regards

"I hate spam"

[Edit: live link to known spam payload site broken]

Edited by Farelf
Link to comment
Share on other sites

The 'hot' sites list of what reporters are seeing at any given time is shown at http://www.spamcop.net/w3m?action=inprogress;type=www

The cycle time is fairly short, so I guess that page should be showing emerging trends more than long-term, relatively low volume pests and exploits. Some of that is picked up in the SURBL which keeps a database and is accordingly longer-term. The lookup page is http://george.surbl.org/lookup.html. The three domains you are surveying are all shown as currently listed there.

Discussion on filtering, greylisting, etc. would be better carried out (and/or researched) in the SpamCop Email System & Accounts forum. I guess you wanted a wider base for your survey? (I predict 100% 'No' :P - but if you're quick enough you can edit the poll to insert a 'Yes' selection). But if you just want to keep spam out of your inbox (as do we all) you need to be looking at/talking about your filters and you should lead by talking about your current selections and settings. Or, greylisting should stop most of it without further work on your part though I can't talk from personal experience, not being a mail system user.

Link to comment
Share on other sites

In addition to Farelf's suggestions, I'll add the request for a Trackng URL or two. Not much fun trying to talk about "a spam" if no one else can actually see "the spam" in question. There may be the needed data within in a displayed data-set.

You made no mention of 'how' you've configured your e-mail receiving and reporting modes .... for example, is it possible that these specific e-mails are being forwarded from another acoount that you have identified in your whitelist?

Link to comment
Share on other sites

I have moved this thread to this forum as suggested.

I am receiving about 10 spam messages a day to my spamcop email address. How is it that they are not being filtered out by spamcop?

I have all of the spamcop detection options on (see below). The email always links to Chinese sites i.e.

http:// www.humohvw.cn/1.gif

rojawsh.cn/

053dc4.lipayhw.cn/

It has been a few weeks now that I have been getting a 5-10 a day.

I also use MailWasher and all of the Vigra / Pfizer posts are detected by MailWasher (usually by Spamhaus). Why not Spamcop...?? I have Spamhaus filter on.

Any help Spamcop can offer? Would like them to stop.

My Settings

Greylisting is ON

SpamCop Blacklist ON

Spamhaus Blacklist ON

South Korea (the country) ON

China (the country) ON

Nigeria ON

Argentina ON

Brazil ON

Composite Blocking List ON

Spamhaus XBL ON

Any help Spamcop can offer? Would like them to stop. Have i missed a setting?

Regards

"I hate spam"

Moderator Edit: Merged original Topic made in the Lounge area into this Topic. Poll will be deleted.

Edited by Wazoo
Link to comment
Share on other sites

Hi -

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

Is there something I need to set up... Many thanks

I have edited my email address to show MY.EMAIL not my real email.

From: VIAGRA ® Reseller <MY.EMAIL[at]spamcop.net>

To: MY.EMAIL[at]spamcop.net

Subject: Member MY.EMAIL[at]spamcop.net get 81% 0FF on ALL Pfizer

MIME-Version: 1.0

Content-Type: text/html; charset="WINDOWS-1252"

Content-Transfer-Encoding: 7bit

X-Antivirus: avast! (VPS 091103-1, 11/03/2009), Outbound message

X-Antivirus-Status: Clean

X-SpamCop-Checked:

X-SpamCop-Disposition: Blocked SpamAssassin=16

X-SpamCop-Whitelisted: M Y.E M A I L[at]spamcop.net

Link to comment
Share on other sites

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

Yes remove it (The Whitelist only looks at the FROM address)

Link to comment
Share on other sites

I think I found the reason. It appears as if the email is being spoofed from my spamcop email address. Is it safe for me to remove my spamcop email from the whitelist?

As petzl has observed, you should not have your own Email address in your whitelist. Spoofing your own address is one of the most common ways spammers use to overcome spam filtering.

Andrew

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...