Lots of pharmacy spam

[kellum]

Please forgive me if this is a faq.

Lately I've had a lot of spam with subjects like "Online RX shop with Mastercard and Visa" get past the spamcop filters. When I report this stuff, the spamcop reporting data nearly always says "Reports regarding this spam have already been sent".

So... Howcome the spamcop filters aren't catching this stuff?

[Miss Betsy]

First of all, are you a spamcop email customer? Is that what you mean getting by the spamcop filters?

Second of all, a Tracking URL (which is in the FAQ) is necessary to discuss why a particular submission has a particular response from spamcop.

I may be thinking of something else than you have described, but I can't think of how you would get such a comment: "Reports regarding this spam have already been sent" when submitting a spam to the parser.

If you are an email customer, there are several discussions in the Email forum on how to tweak your filters so that you don't see those emails in your inbox.

Miss Betsy

[kellum]

Yes, sorry, I'm an email customer. What's a tracking URL?

[rconner]

When I report this stuff, the spamcop reporting data nearly always says "Reports regarding this spam have already been sent".

I only see this when I try to submit a message that has already been submitted through SpamCop (usually when I hit the back button or try to run SpamCop in two browsers at once).

As Miss Betsy says, we need to know a bit more about how you use SpamCop. When do you first see these spams, in your inbox or on a SpamCop page? What do you do with them once you have seen them (i.e., how do you submit them to SpamCop)?

-- rick

[kellum]

OK. I read my spamcop email with Thunderbird. In turn, I've set my spamcop account to fetch my mail from my work email account. When I report spam, I log in to webmail.spamcop.net and just click the "report spam" link. Then I get a [spamcom]quick reporting data email. I see "this spam has already been reported" when I look at the report.

[rconner]

OK. I read my spamcop email with Thunderbird. In turn, I've set my spamcop account to fetch my mail from my work email account. When I report spam, I log in to webmail.spamcop.net and just click the "report spam" link. Then I get a [spamcom]quick reporting data email. I see "this spam has already been reported" when I look at the report.

This helps, but I am still confused. What happens to the mail that is cleared by SpamCop as non-spam? Where do you send it in order to be able to read it from Thunderbird? In other words, do you forward out from SpamCop? I'm suspecting a mail loop but have little info to go on. In any case I am not an expert on the webmail service. Perhaps someone more knowledgeable may come along shortly.

-- rick

[Farelf]

... What's a tracking URL?

Announcement: [How-to] Post a Question (and prevent stupid/rude answers) - the second bit in red. never mind, many, even most, have to be pointed there.

[Moved from Lounge, for better "visibility" and access to relevant pinned notes and discussion, member (to be) PM'd]

[kellum]

Thanks. The tracking URL is

http://www.spamcop.net/sc?id=z1646933060z3...e5a6d348ba386fz

[StevenUnderwood]

Thanks. The tracking URL is

http://www.spamcop.net/sc?id=z1646933060z3...e5a6d348ba386fz

Thank you...

From those headers we see:

X-spam-Level: *

X-spam-Status: hits=2.0 tests=HTML_MESSAGE,URIBL_BLACK version=3.2.3

So you would need your SpamAssassin settings really low (perhaps even 1 depending on how the rounding works) for this message to be caught by those rules.

and:

X-SpamCop-Checked: 216.154.195.53 130.65.82.244 130.65.3.74 65.54.246.228 65.55.137.76

None of these IP addresses are currently listed in the blocklist and only 2 have reports against them. Your report is the only report shown against the last IP, so there is no reason for spamcop to block it here.

[Lking]

Your report is the only report shown against the last IP, so there is no reason for spamcop to block it here.

Kellum,

Using Steven's information, I guess the 9th was your lucky day! Someone has to be first. The subject looks familiar but mine no dough came from another source.