Google docs spam - SpamAssassin

This is a discussion on Google docs spam - SpamAssassin ; ...

+ Reply to Thread
Results 1 to 6 of 6

Thread: Google docs spam

  1. Re: Google docs spam


  2. Google docs spam

    Now google docs abuse spam.

    Spammer is using the docs page with a id from google. Atleast google
    should have a decent abuse reporting system



    This mail went by almost clean, Are there any rules I am missing
    https://ecm.netcore.co.in/tmp/spamgd.txt


    Thanks
    Ram


  3. Re: Google docs spam

    On Wednesday 21 May 2008 12:12:11 ram wrote:
    > Spammer is using the docs page with a id from google. Atleast google
    > should have a decent abuse reporting s> ystem


    this is new. spammers are fast

    > This mail went by almost clean, Are there any rules I am missing
    > https://ecm.netcore.co.in/tmp/spamgd.txt


    same here. 0.0 points. (without bayes)

    The spamsource is still not listet anywhere.
    Reporting to spamcop might be an option.
    Looks like a czech dialup, i wonder why they are not listet in the PBL.

    Maybe one can write a rule for those:
    Received: from [77.48.35.201] (unknown [10.10.1.25]) by smtp-sfn.sitkom.cz

    (atre there any dnsbls for reserved IPS?)



    --
    best regards
    Arvid Ephraim Picciani


  4. Re: Google docs spam

    On Wednesday 21 May 2008 5:12 am, ram wrote:
    > Now google docs abuse spam.
    >
    > Spammer is using the docs page with a id from google. Atleast google
    > should have a decent abuse reporting system
    >
    >
    >
    > This mail went by almost clean, Are there any rules I am missing
    > https://ecm.netcore.co.in/tmp/spamgd.txt
    >
    >
    > Thanks
    > Ram


    It scored pretty high here:

    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE
    5.0 BOTNET Relay might be a spambot or virusbot
    [botnet0.8,ip=202.162.229.17,rdns=mail1.example.com ,baddns]
    0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
    1.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
    [score: 0.4976]
    -0.0 DCC_CHECK_NEGATIVE Not listed in DCC
    [cpollock 1117; Body=1 Fuz1=1 Fuz2=1]
    10 CLAMAV Clam AntiVirus detected a virus
    1.0 SAGREY Adds 1.0 to spam from first-time senders

    ClamAv sig is below:

    X-Spam-Virus: Yes (Email.Spam.Gen3183.Sanesecurity.08051617)

    --
    Chris
    KeyID 0xE372A7DA98E6705C

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.9 (GNU/Linux)

    iEYEABECAAYFAkg0Av0ACgkQ43Kn2pjmcFzUEACfa19DOns5sT ypjZsDW7+araaB
    trcAnRuhGgIh2TX9/Q+08Pr/VviqPd4g
    =EYX3
    -----END PGP SIGNATURE-----


  5. Re: Google docs spam

    ram wrote:
    > Now google docs abuse spam.
    >
    > Spammer is using the docs page with a id from google. Atleast google
    > should have a decent abuse reporting system
    >
    >
    >
    > This mail went by almost clean, Are there any rules I am missing
    > https://ecm.netcore.co.in/tmp/spamgd.txt
    >
    >
    > Thanks
    > Ram
    >
    >
    >

    I am slow. How are they doing this? I couldn't even figure it out
    looking at the example e-mail.


  6. Re: Google docs spam


    On Wed, May 21, 2008 13:48, Robert Schetterer wrote:

    > Hi Chris, why not blocking such mails before
    > getting them to spamassassin
    > use clamv-milter at income smtp level with
    > http://www.sanesecurity.co.uk/clamav/ sigs


    its not as virus, its spam detected in clamav, virus do something !



    Benny Pedersen
    Need more webspace ? http://www.servage.net/?coupon=cust37098


+ Reply to Thread