Jump to content

Spam Getting Through


Recommended Posts

I usually get one or two spams a week that make it through my SpamCop e-mail account into my inbox - the great majority (about 100 to 150 a day) are filtered into my hold-file where I report them.

Lately the frequency of spam slipping through has increased. Today I got six. The subject line of one was "Produce Stronger and Rock Hard Erections", another was "*Curso de Pilates en su casa".

Full header and text of "Produce Stronger..." spam here: http://tinyurl.com/y29rdx

The sender is not on my white-list.

I would think that such spam should have been easy to catch. I have not changed any settings on my account; I have all the blacklists selected, and SpamAssasin is set to 1.

Why is more spam getting through? Is there something I can do to improve the filtering?

Thanks!

Best Regards,

Mark Buckles

San Diego

Link to comment
Share on other sites

A Tracking URL would allow others to 'see' the spam you are talking about and perhaps come up with some suggestions, clues, etc. Chasing down some unknown data at some undefined link is not the normal way to ask for help here about a SpamCop.net issue.

Link to comment
Share on other sites

I usually get one or two spams a week that make it through my SpamCop e-mail account into my inbox - the great majority (about 100 to 150 a day) are filtered into my hold-file where I report them.

Lately the frequency of spam slipping through has increased. Today I got six. The subject line of one was "Produce Stronger and Rock Hard Erections", another was "*Curso de Pilates en su casa".

Full header and text of "Produce Stronger..." spam here: http://tinyurl.com/y29rdx

The sender is not on my white-list.

I would think that such spam should have been easy to catch. I have not changed any settings on my account; I have all the blacklists selected, and SpamAssasin is set to 1.

Why is more spam getting through? Is there something I can do to improve the filtering?

Thanks!

Best Regards,

Mark Buckles

San Diego

Spamassasin was accidentally off on one server JT apparently turned it back on today

Spamassasin is still not checking some of my spam though? came through as I spoke JT needs to try again

http://www.spamcop.net/sc?id=z1184813286zde1d155f5d30bc9846ee7070c163c384z

Also not seeing that IP 87.162.104.83 being added to the SCBL for scouring

In fact I doubt if any reported spam is being added to the SCBL

Edited by petzl
Link to comment
Share on other sites

A Tracking URL would allow others to 'see' the spam you are talking about and perhaps come up with some suggestions, clues, etc. Chasing down some unknown data at some undefined link is not the normal way to ask for help here about a SpamCop.net issue.

I don't know what a "Tracking URL" is - please explain. Thanks!

note: the link I provided is to a GIF screenshot on my personal website of the spam referenced in my original post. I used the TinyUrl.com shortening/forwarding system out of habit. The exact URL is

http://www.markbuckles.com/misc/spam.gif

Is that okay?

Link to comment
Share on other sites

I don't know what a "Tracking URL" is - please explain. Thanks!...
Hi Mark - SC Wiki entry - Tracking URL is one reference to the beast. Your screenshots are great but the tracker shows exactly what went through the parser, includes munging if you have that selected and it is text so people can fiddle with their own copy and paste test parses if necessary, etc. etc.
Link to comment
Share on other sites

I'll add my own $.02 to this. An inordinate amount of ridiculously obvious spam is STILL getting through. Here are a couple of tracking URLS:

http://www.spamcop.net/sc?id=z1185008139za...fb06b84e0c7e7bz

http://www.spamcop.net/sc?id=z1185008154z8...a4b5a6de8842e4z

So AFAIK, the problem is still ongoing.

First link: by filter8.cesmail.net

Second link: by filter8.cesmail.net

filter8.cesmail.net is the machine currently not running SpamAssassin as seen in the other thread in this forum about spamassassin. Thinking about merging the two threads but this title might be recognized by the less technical people.

Link to comment
Share on other sites

Spamassasin was accidentally off on one server JT apparently turned it back on today

That's not quite correct. The SA process on the server named "filter7" was broken, and restored three days ago. The SA process on "filter8" is currently dead and has not yet been fixed...I just received another spam in my inbox a few seconds ago proving that.

DT

Thinking about merging the two threads but this title might be recognized by the less technical people.

I don't think they should be merged yet, for that very reason.

DT

Link to comment
Share on other sites

I think JT might have just fixed the problem with "filter8" - here are some header lines from one that just got through to my inbox:

X-spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-26) on filter8

X-spam-Level: ***

X-spam-Status: hits=4.0 tests=DATE_IN_PAST_96_XX,HTML_MESSAGE,ONLINE_PHARMACY,

SARE_WEOFFER version=3.1.4

I've got my SA threshhold set at 4, but you'll see only three asterisks, so this one probably just squeaked by and didn't wind up in my HELD Mail.

DT

Link to comment
Share on other sites

  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...