MailScanner

Popular Threads From MailScanner:

Docx problems

MailScanner ANNOUNCE: Dropoff

FileType rules show executable even though file shows data -- Please help fix.

New beta release 4.81.2

Spam from same email ID.

List Statistics

Total Threads: 847
Total Posts: 1912

Phrases Used to Find This Thread

Page 1 of 1

08-09-2010 08:45 PM

MailScanner member admin is online now

User

08-09-2010 09:25 PM

MailScanner member admin is online now

User

08-09-2010 10:00 PM

MailScanner member admin is online now

User

08-09-2010 10:18 PM

MailScanner member admin is online now

User

08-09-2010 10:26 PM

MailScanner member admin is online now

User

08-09-2010 10:30 PM

MailScanner member admin is online now

User

08-09-2010 10:30 PM

MailScanner member admin is online now

User

08-09-2010 10:31 PM

MailScanner member admin is online now

User

08-09-2010 10:42 PM

MailScanner member admin is online now

User

#10

08-09-2010 10:43 PM

MailScanner member admin is online now

User

#11

08-09-2010 10:45 PM

MailScanner member admin is online now

User

#12

08-09-2010 11:11 PM

MailScanner member admin is online now

User

#13

08-09-2010 11:28 PM

MailScanner member admin is online now

User

#14

09-09-2010 09:08 AM

MailScanner member admin is online now

User

#15

09-09-2010 09:18 AM

MailScanner member admin is online now

User

Dear All,

Do we have any techniques to stop spam emails generated from the same ID?
Please find below example for the same.
*
**From
* *:
* ** *To : * *Subject :
|AGRA � Official 02% 0FF!* *1.6Kb* *
* *Clean*
*Headers* are as below for above mail.

Return-Path: <�g>
Received: from 177-37-94-178.pool.ukrtel.net
(177-37-94-178.pool.ukrtel.net[178.94.37.177])
by hi.com (8.13.8/8.13.8) with SMTP id o88JcJCe018330
for <>; Wed, 8 Sep 2010 14:38:30 -0500
Date: Wed, 8 Sep 2010 14:38:19 -0500
Message-Id: <>
From:
To:
Subject: |AGRA ® Official 02% 0FF!
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

Thank you,

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 Please don't paste spam on the list. Use pastebin.

You can write an SA rule or - depending on MTA - do it at the MTA level.

--

Alex Neuman
BBM 20EA17C5
+507 6781-9505
Skype:

-----Original Message-----
From: Dhaval Soni <>
Sender: mailscanner-
Date: Thu, 9 Sep 2010 01:15:02
To: MailScanner discussion<>
Reply-To: MailScanner discussion <>
Subject: Spam from same email ID.

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) Dear Ales,

On Thu, Sep 9, 2010 at 1:55 AM, Alex Neuman <> wrote:

> Please don't paste spam on the list. Use pastebin.
>

Sorry for that.

>
> You can write an SA rule or - depending on MTA - do it at the MTA level.
>

How can we write at MTA level?

Thank you,

>
> --
>
> Alex Neuman
> BBM 20EA17C5
> +507 6781-9505
> Skype:
>
> -----Original Message-----
> From: Dhaval Soni <>
> Sender: mailscanner-
> Date: Thu, 9 Sep 2010 01:15:02
> To: MailScanner discussion<>
> Reply-To: MailScanner discussion <>
> Subject: Spam from same email ID.
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 By modifying its configuration. Depends on your MTA.
--

Alex Neuman
BBM 20EA17C5
+507 6781-9505
Skype:

-----Original Message-----
From: Dhaval Soni <>
Sender: mailscanner-
Date: Thu, 9 Sep 2010 02:30:18
To: MailScanner discussion<>
Reply-To: MailScanner discussion <>
Subject: Re: Spam from same email ID.

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) Dear Alex,

On Thu, Sep 9, 2010 at 2:48 AM, Alex Neuman <> wrote:

> By modifying its configuration. Depends on your MTA.
>

I am using sendmail 8.13 ( latest one ). Will you please give example? I do
not have any idea about it.

Thank you,

> --
>
> Alex Neuman
> BBM 20EA17C5
> +507 6781-9505
> Skype:
>
> -----Original Message-----
> From: Dhaval Soni <>
> Sender: mailscanner-
> Date: Thu, 9 Sep 2010 02:30:18
> To: MailScanner discussion<>
> Reply-To: MailScanner discussion <>
> Subject: Re: Spam from same email ID.
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 At the MTA level use SPF, SenderID, Domainkeys or DKIM. Available to
varying degrees for the different MTA used by MailScanner.

Phil Hale
Systems Programmer II - Linux Systems Administrator
Texas A&M University-Corpus Christi

On 09/08/2010 04:18 PM, Alex Neuman wrote:
> By modifying its configuration. Depends on your MTA.
> --
>
> Alex Neuman
> BBM 20EA17C5
> +507 6781-9505
> Skype:
>
> -----Original Message-----
> From: Dhaval Soni<>
> Sender: mailscanner-
> Date: Thu, 9 Sep 2010 02:30:18
> To: MailScanner discussion<>
> Reply-To: MailScanner discussion<>
> Subject: Re: Spam from same email ID.
>
--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) You'd have to ask in the sendmail list, and it probably involves a milter.

On Wed, Sep 8, 2010 at 4:26 PM, Dhaval Soni <> wrote:
> Dear Alex,
>
> On Thu, Sep 9, 2010 at 2:48 AM, Alex Neuman <> wrote:
>>
>> By modifying its configuration. Depends on your MTA.
>
> I am using sendmail 8.13 ( latest one ). Will you please give example? I do
> not have any idea about it.
>
> Thank you,
>
>>
>> --
>>
>> Alex Neuman
>> BBM 20EA17C5
>> +507 6781-9505
>> Skype:
>>
>> -----Original Message-----
>> From: Dhaval Soni <>
>> Sender: mailscanner-
>> Date: Thu, 9 Sep 2010 02:30:18
>> To: MailScanner discussion<>
>> Reply-To: MailScanner discussion <>
>> Subject: Re: Spam from same email ID.
>>
>> --
>> MailScanner mailing list
>>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>> --
>> MailScanner mailing list
>>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>
>
>
> --
> Kind regards,
> Dhaval Soni
> Red Hat Certified Architect
> ID: 804 007 900 325 939
>
> M: +91-9662029620
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>

--
--

Alex Neuman van der Hans
Reliant Technologies
+507 6781-9505
+507 202-1525
BB Pin: 20EA17C5

Skype: alexneuman
--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) You could also set up a rule like:

From: and To: yes

in your %rules-dir%/spam.blacklist.rules to do something like that
within MailScanner.

On Wed, Sep 8, 2010 at 4:30 PM, Alex Neuman <> wrote:
> You'd have to ask in the sendmail list, and it probably involves a milter.
>
> On Wed, Sep 8, 2010 at 4:26 PM, Dhaval Soni <> wrote:
>> Dear Alex,
>>
>> On Thu, Sep 9, 2010 at 2:48 AM, Alex Neuman <> wrote:
>>>
>>> By modifying its configuration. Depends on your MTA.
>>
>> I am using sendmail 8.13 ( latest one ). Will you please give example? I do
>> not have any idea about it.
>>
>> Thank you,
>>
>>>
>>> --
>>>
>>> Alex Neuman
>>> BBM 20EA17C5
>>> +507 6781-9505
>>> Skype:
>>>
>>> -----Original Message-----
>>> From: Dhaval Soni <>
>>> Sender: mailscanner-
>>> Date: Thu, 9 Sep 2010 02:30:18
>>> To: MailScanner discussion<>
>>> Reply-To: MailScanner discussion <>
>>> Subject: Re: Spam from same email ID.
>>>
>>> --
>>> MailScanner mailing list
>>>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>> --
>>> MailScanner mailing list
>>>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>> --
>> Kind regards,
>> Dhaval Soni
>> Red Hat Certified Architect
>> ID: 804 007 900 325 939
>>
>> M: +91-9662029620
>>
>> --
>> MailScanner mailing list
>>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
>
>
> --
> --
>
> Alex Neuman van der Hans
> Reliant Technologies
> +507 6781-9505
> +507 202-1525
> BB Pin: 20EA17C5
>
> Skype: alexneuman
>

--
--

Alex Neuman van der Hans
Reliant Technologies
+507 6781-9505
+507 202-1525
BB Pin: 20EA17C5

Skype: alexneuman
--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) Dear Alex,

On Thu, Sep 9, 2010 at 3:00 AM, Alex Neuman <> wrote:

> You'd have to ask in the sendmail list, and it probably involves a milter.
>

I have used smf-sav milter with Sendmail. Which helped a lot but still
facing problem.

>
> On Wed, Sep 8, 2010 at 4:26 PM, Dhaval Soni <> wrote:
> > Dear Alex,
> >
> > On Thu, Sep 9, 2010 at 2:48 AM, Alex Neuman <> wrote:
> >>
> >> By modifying its configuration. Depends on your MTA.
> >
> > I am using sendmail 8.13 ( latest one ). Will you please give example? I
> do
> > not have any idea about it.
> >
> > Thank you,
> >
> >>
> >> --
> >>
> >> Alex Neuman
> >> BBM 20EA17C5
> >> +507 6781-9505
> >> Skype:
> >>
> >> -----Original Message-----
> >> From: Dhaval Soni <>
> >> Sender: mailscanner-
> >> Date: Thu, 9 Sep 2010 02:30:18
> >> To: MailScanner discussion<>
> >> Reply-To: MailScanner discussion <>
> >> Subject: Re: Spam from same email ID.
> >>
> >> --
> >> MailScanner mailing list
> >>
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
> >>
> >> --
> >> MailScanner mailing list
> >>
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >
> >
> >
> > --
> > Kind regards,
> > Dhaval Soni
> > Red Hat Certified Architect
> > ID: 804 007 900 325 939
> >
> > M: +91-9662029620
> >
> > --
> > MailScanner mailing list
> >
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> >
>
>
>
> --
> --
>
> Alex Neuman van der Hans
> Reliant Technologies
> +507 6781-9505
> +507 202-1525
> BB Pin: 20EA17C5
>
> Skype: alexneuman
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 On Thu, Sep 9, 2010 at 3:01 AM, Alex Neuman <> wrote:

> You could also set up a rule like:
>
> From: and To:yes
>

Yes, we can do it, but so many emails are coming. It requires a lot time and
continues monitoring to stop it.

Thank you,

>
> in your %rules-dir%/spam.blacklist.rules to do something like that
> within MailScanner.
>
> On Wed, Sep 8, 2010 at 4:30 PM, Alex Neuman <> wrote:
> > You'd have to ask in the sendmail list, and it probably involves a
> milter.
> >
> > On Wed, Sep 8, 2010 at 4:26 PM, Dhaval Soni <>
> wrote:
> >> Dear Alex,
> >>
> >> On Thu, Sep 9, 2010 at 2:48 AM, Alex Neuman <> wrote:
> >>>
> >>> By modifying its configuration. Depends on your MTA.
> >>
> >> I am using sendmail 8.13 ( latest one ). Will you please give example? I
> do
> >> not have any idea about it.
> >>
> >> Thank you,
> >>
> >>>
> >>> --
> >>>
> >>> Alex Neuman
> >>> BBM 20EA17C5
> >>> +507 6781-9505
> >>> Skype:
> >>>
> >>> -----Original Message-----
> >>> From: Dhaval Soni <>
> >>> Sender: mailscanner-
> >>> Date: Thu, 9 Sep 2010 02:30:18
> >>> To: MailScanner discussion<>
> >>> Reply-To: MailScanner discussion <>
> >>> Subject: Re: Spam from same email ID.
> >>>
> >>> --
> >>> MailScanner mailing list
> >>>
> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>
> >>> Before posting, read http://wiki.mailscanner.info/posting
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>>
> >>>
> >>> --
> >>> MailScanner mailing list
> >>>
> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>
> >>> Before posting, read http://wiki.mailscanner.info/posting
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>
> >>
> >>
> >> --
> >> Kind regards,
> >> Dhaval Soni
> >> Red Hat Certified Architect
> >> ID: 804 007 900 325 939
> >>
> >> M: +91-9662029620
> >>
> >> --
> >> MailScanner mailing list
> >>
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
> >>
> >
> >
> >
> > --
> > --
> >
> > Alex Neuman van der Hans
> > Reliant Technologies
> > +507 6781-9505
> > +507 202-1525
> > BB Pin: 20EA17C5
> >
> > Skype: alexneuman
> >
>
>
>
> --
> --
>
> Alex Neuman van der Hans
> Reliant Technologies
> +507 6781-9505
> +507 202-1525
> BB Pin: 20EA17C5
>
> Skype: alexneuman
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 The other message involving dkim and spf works well, too.
--

Alex Neuman
BBM 20EA17C5
+507 6781-9505
Skype:

-----Original Message-----
From: Dhaval Soni <>
Sender: mailscanner-
Date: Thu, 9 Sep 2010 03:12:15
To: MailScanner discussion<>
Reply-To: MailScanner discussion <>
Subject: Re: Spam from same email ID.

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) On Thu, Sep 9, 2010 at 3:15 AM, Alex Neuman <> wrote:

> The other message involving dkim and spf works well, too.
>

I already have DKIM and spf with spamassassin. But is it preferable to use
smf-spf at MTA level?

Thank you,

> --
>
> Alex Neuman
> BBM 20EA17C5
> +507 6781-9505
> Skype:
>
> -----Original Message-----
> From: Dhaval Soni <>
> Sender: mailscanner-
> Date: Thu, 9 Sep 2010 03:12:15
> To: MailScanner discussion<>
> Reply-To: MailScanner discussion <>
> Subject: Re: Spam from same email ID.
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

--
Kind regards,
Dhaval Soni
Red Hat Certified Architect
ID: 804 007 900 325 939

M: +91-9662029620 Probably. Depends on your situation. I use it myself at the mta level with smf-spf.
--

Alex Neuman
BBM 20EA17C5
+507 6781-9505
Skype:

-----Original Message-----
From: Dhaval Soni <>
Sender: mailscanner-
Date: Thu, 9 Sep 2010 03:41:05
To: MailScanner discussion<>
Reply-To: MailScanner discussion <>
Subject: Re: Spam from same email ID.

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) I also use smf-spf and it's amazing. You can create spf records with a hard fail, ie ( -all) and it will reject them with a good bounce.
It's very configurable too.

-----Original Message-----
From: mailscanner- [mailto:mailscanner-] On Behalf Of Alex Neuman
Sent: 08 September 2010 23:28
To: MailScanner discussion
Subject: Re: Spam from same email ID.

Probably. Depends on your situation. I use it myself at the mta level with smf-spf.
--

Alex Neuman
BBM 20EA17C5
+507 6781-9505
Skype:

-----Original Message-----
From: Dhaval Soni <>
Sender: mailscanner-
Date: Thu, 9 Sep 2010 03:41:05
To: MailScanner discussion<>
Reply-To: MailScanner discussion <>
Subject: Re: Spam from same email ID.

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
) On 08/09/10 23:11, Dhaval Soni wrote:
>
>
> On Thu, Sep 9, 2010 at 3:15 AM, Alex Neuman <
> > wrote:
>
> The other message involving dkim and spf works well, too.
>
>
> I already have DKIM and spf with spamassassin. But is it preferable to
> use smf-spf at MTA level?
>

You might have DKIM and SPF in SpamAssassin; but these are totally
useless unless the domain you are having this problem with (e.g.
123l.com) actually publishes or uses them...

smf@smf-laptop:~$ host -t TXT 123l.com
123l.com has no TXT record

Same with smf-spf or milter-spiff; they'll only fix this problem if a
policy is published for the domain in question (ideally a '-all' hard fail).

Regards,
Steve.
--
MailScanner mailing list

http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!
)

#16

09-09-2010 10:24 AM

MailScanner member admin is online now

User

#17

09-09-2010 04:10 PM

MailScanner member admin is online now

User

#18

09-09-2010 05:20 PM

MailScanner member admin is online now

User

#19

10-09-2010 09:31 AM

MailScanner member admin is online now

User

#20

10-09-2010 09:42 AM

MailScanner member admin is online now

User

Page 1 of 1

NewsArc Lists | Culture Pages | Computing Archive | Media-Pages

Link to this page on your blog or website by copying the HTML code below and pasting it into your site:

Next Thread »