markbuckles Posted January 5, 2007 Share Posted January 5, 2007 I usually get one or two spams a week that make it through my SpamCop e-mail account into my inbox - the great majority (about 100 to 150 a day) are filtered into my hold-file where I report them. Lately the frequency of spam slipping through has increased. Today I got six. The subject line of one was "Produce Stronger and Rock Hard Erections", another was "*Curso de Pilates en su casa". Full header and text of "Produce Stronger..." spam here: http://tinyurl.com/y29rdx The sender is not on my white-list. I would think that such spam should have been easy to catch. I have not changed any settings on my account; I have all the blacklists selected, and SpamAssasin is set to 1. Why is more spam getting through? Is there something I can do to improve the filtering? Thanks! Best Regards, Mark Buckles San Diego Link to comment Share on other sites More sharing options...
Wazoo Posted January 5, 2007 Share Posted January 5, 2007 A Tracking URL would allow others to 'see' the spam you are talking about and perhaps come up with some suggestions, clues, etc. Chasing down some unknown data at some undefined link is not the normal way to ask for help here about a SpamCop.net issue. Link to comment Share on other sites More sharing options...
petzl Posted January 5, 2007 Share Posted January 5, 2007 I usually get one or two spams a week that make it through my SpamCop e-mail account into my inbox - the great majority (about 100 to 150 a day) are filtered into my hold-file where I report them. Lately the frequency of spam slipping through has increased. Today I got six. The subject line of one was "Produce Stronger and Rock Hard Erections", another was "*Curso de Pilates en su casa". Full header and text of "Produce Stronger..." spam here: http://tinyurl.com/y29rdx The sender is not on my white-list. I would think that such spam should have been easy to catch. I have not changed any settings on my account; I have all the blacklists selected, and SpamAssasin is set to 1. Why is more spam getting through? Is there something I can do to improve the filtering? Thanks! Best Regards, Mark Buckles San Diego Spamassasin was accidentally off on one server JT apparently turned it back on today Spamassasin is still not checking some of my spam though? came through as I spoke JT needs to try again http://www.spamcop.net/sc?id=z1184813286zde1d155f5d30bc9846ee7070c163c384z Also not seeing that IP 87.162.104.83 being added to the SCBL for scouring In fact I doubt if any reported spam is being added to the SCBL Link to comment Share on other sites More sharing options...
markbuckles Posted January 5, 2007 Author Share Posted January 5, 2007 A Tracking URL would allow others to 'see' the spam you are talking about and perhaps come up with some suggestions, clues, etc. Chasing down some unknown data at some undefined link is not the normal way to ask for help here about a SpamCop.net issue. I don't know what a "Tracking URL" is - please explain. Thanks! note: the link I provided is to a GIF screenshot on my personal website of the spam referenced in my original post. I used the TinyUrl.com shortening/forwarding system out of habit. The exact URL is http://www.markbuckles.com/misc/spam.gif Is that okay? Link to comment Share on other sites More sharing options...
Wazoo Posted January 5, 2007 Share Posted January 5, 2007 I don't know what a "Tracking URL" is - please explain. Thanks! Dictionary - Tracking URL Glossary - Tracking URL Wki - Tracking URL Have you ever submitted a spam for parsing/reporting? The Tracking URL is on every result page, the one that you are supposed to be reviewing for accuracy before hitting the Send button ..... Link to comment Share on other sites More sharing options...
Farelf Posted January 5, 2007 Share Posted January 5, 2007 I don't know what a "Tracking URL" is - please explain. Thanks!...Hi Mark - SC Wiki entry - Tracking URL is one reference to the beast. Your screenshots are great but the tracker shows exactly what went through the parser, includes munging if you have that selected and it is text so people can fiddle with their own copy and paste test parses if necessary, etc. etc. Link to comment Share on other sites More sharing options...
djtodd Posted January 5, 2007 Share Posted January 5, 2007 I'll add my own $.02 to this. An inordinate amount of ridiculously obvious spam is STILL getting through. Here are a couple of tracking URLS: http://www.spamcop.net/sc?id=z1185008139za...fb06b84e0c7e7bz http://www.spamcop.net/sc?id=z1185008154z8...a4b5a6de8842e4z So AFAIK, the problem is still ongoing. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted January 5, 2007 Share Posted January 5, 2007 I'll add my own $.02 to this. An inordinate amount of ridiculously obvious spam is STILL getting through. Here are a couple of tracking URLS: http://www.spamcop.net/sc?id=z1185008139za...fb06b84e0c7e7bz http://www.spamcop.net/sc?id=z1185008154z8...a4b5a6de8842e4z So AFAIK, the problem is still ongoing. First link: by filter8.cesmail.net Second link: by filter8.cesmail.net filter8.cesmail.net is the machine currently not running SpamAssassin as seen in the other thread in this forum about spamassassin. Thinking about merging the two threads but this title might be recognized by the less technical people. Link to comment Share on other sites More sharing options...
DavidT Posted January 5, 2007 Share Posted January 5, 2007 Spamassasin was accidentally off on one server JT apparently turned it back on today That's not quite correct. The SA process on the server named "filter7" was broken, and restored three days ago. The SA process on "filter8" is currently dead and has not yet been fixed...I just received another spam in my inbox a few seconds ago proving that. DT Thinking about merging the two threads but this title might be recognized by the less technical people. I don't think they should be merged yet, for that very reason. DT Link to comment Share on other sites More sharing options...
StevenUnderwood Posted January 5, 2007 Share Posted January 5, 2007 I just received another spam in my inbox a few seconds ago proving that. As did I, but it was in my Held Mail box X-SpamCop-Disposition: Blocked dnsbl.sorbs.net Link to comment Share on other sites More sharing options...
DavidT Posted January 5, 2007 Share Posted January 5, 2007 I think JT might have just fixed the problem with "filter8" - here are some header lines from one that just got through to my inbox: X-spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-26) on filter8 X-spam-Level: *** X-spam-Status: hits=4.0 tests=DATE_IN_PAST_96_XX,HTML_MESSAGE,ONLINE_PHARMACY, SARE_WEOFFER version=3.1.4 I've got my SA threshhold set at 4, but you'll see only three asterisks, so this one probably just squeaked by and didn't wind up in my HELD Mail. DT Link to comment Share on other sites More sharing options...
djtodd Posted January 20, 2007 Share Posted January 20, 2007 Methinks Filter7 is having issues now. http://www.spamcop.net/sc?id=z1198216115z8...e73c99b7df0796z Link to comment Share on other sites More sharing options...
DavidT Posted January 20, 2007 Share Posted January 20, 2007 No doubt about it...but we've already covered that many hours ago in the only other active thread here, titled "SpamAssassin v3.1.0 on one spam, and v.3.1.1 on another?" DT Link to comment Share on other sites More sharing options...
djtodd Posted January 20, 2007 Share Posted January 20, 2007 No doubt about it...but we've already covered that many hours ago in the only other active thread here, titled "SpamAssassin v3.1.0 on one spam, and v.3.1.1 on another?" There you go tricking me again! Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.