Jump to content

Lots of pharmacy spam


Recommended Posts

Please forgive me if this is a faq.

Lately I've had a lot of spam with subjects like "Online RX shop with Mastercard and Visa" get past the spamcop filters. When I report this stuff, the spamcop reporting data nearly always says "Reports regarding this spam have already been sent".

So... Howcome the spamcop filters aren't catching this stuff?

Link to comment
Share on other sites

First of all, are you a spamcop email customer? Is that what you mean getting by the spamcop filters?

Second of all, a Tracking URL (which is in the FAQ) is necessary to discuss why a particular submission has a particular response from spamcop.

I may be thinking of something else than you have described, but I can't think of how you would get such a comment: "Reports regarding this spam have already been sent" when submitting a spam to the parser.

If you are an email customer, there are several discussions in the Email forum on how to tweak your filters so that you don't see those emails in your inbox.

Miss Betsy

Link to comment
Share on other sites

When I report this stuff, the spamcop reporting data nearly always says "Reports regarding this spam have already been sent".
I only see this when I try to submit a message that has already been submitted through SpamCop (usually when I hit the back button or try to run SpamCop in two browsers at once).

As Miss Betsy says, we need to know a bit more about how you use SpamCop. When do you first see these spams, in your inbox or on a SpamCop page? What do you do with them once you have seen them (i.e., how do you submit them to SpamCop)?

-- rick

Link to comment
Share on other sites

OK. I read my spamcop email with Thunderbird. In turn, I've set my spamcop account to fetch my mail from my work email account. When I report spam, I log in to webmail.spamcop.net and just click the "report spam" link. Then I get a [spamcom]quick reporting data email. I see "this spam has already been reported" when I look at the report.

Link to comment
Share on other sites

OK. I read my spamcop email with Thunderbird. In turn, I've set my spamcop account to fetch my mail from my work email account. When I report spam, I log in to webmail.spamcop.net and just click the "report spam" link. Then I get a [spamcom]quick reporting data email. I see "this spam has already been reported" when I look at the report.

This helps, but I am still confused. What happens to the mail that is cleared by SpamCop as non-spam? Where do you send it in order to be able to read it from Thunderbird? In other words, do you forward out from SpamCop? I'm suspecting a mail loop but have little info to go on. In any case I am not an expert on the webmail service. Perhaps someone more knowledgeable may come along shortly.

-- rick

Link to comment
Share on other sites

Thank you...

From those headers we see:

X-spam-Level: *

X-spam-Status: hits=2.0 tests=HTML_MESSAGE,URIBL_BLACK version=3.2.3

So you would need your SpamAssassin settings really low (perhaps even 1 depending on how the rounding works) for this message to be caught by those rules.

and:

X-SpamCop-Checked: 216.154.195.53 130.65.82.244 130.65.3.74 65.54.246.228 65.55.137.76

None of these IP addresses are currently listed in the blocklist and only 2 have reports against them. Your report is the only report shown against the last IP, so there is no reason for spamcop to block it here.

Link to comment
Share on other sites

Your report is the only report shown against the last IP, so there is no reason for spamcop to block it here.

Kellum,

Using Steven's information, I guess the 9th was your lucky day! Someone has to be first. The subject looks familiar but mine no dough came from another source.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...