You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michael Scheidell <sc...@secnap.net> on 2008/10/29 13:13:34 UTC
had it with spaces spam and idiots at hotmail
I have had it with spaces live random url spam. we get thousands of
them, most from zombots, and idiots at hotmail want a valid live account
to process the complaint"
"Thank you for reporting spam to the Windows Live Hotmail Support Team. This is an auto-generated response to inform you that we have received your submission. Please note that you will not receive a reply if you respond directly to this message.
Unfortunately, in order to process your request, Hotmail Support needs a valid Windows Live Hotmail hosted account."
this looks for it, assigns some reasonable scores, and if (add your
favorite shortcut) bumps it up another 5.
uri ST_SPACES /\.spaces\.live\.com/$
score ST_SPACES 5 3 4 2
meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET || RCVD_IN_XBL
|| RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
tflags ST_SPACES_BUMP net
score ST_SPACES_BUMP 5
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* King of Spam Filters, SC Magazine 2008
* Information Security Award 2008, Info Security Products Guide
* CRN Magazine Top 40 Emerging Security Vendors
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: had it with spaces spam and idiots at hotmail
Posted by mouss <mo...@netoyen.net>.
RobertH wrote:
>> this looks for it, assigns some reasonable scores, and if (add your
>> favorite shortcut) bumps it up another 5.
>>
>> uri ST_SPACES /\.spaces\.live\.com/$
>> score ST_SPACES 5 3 4 2
>>
>> meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET ||
>> RCVD_IN_XBL
>> || RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
>> tflags ST_SPACES_BUMP net
>> score ST_SPACES_BUMP 5
>>
>> --
>> Michael Scheidell, CTO
>
> is it just me?
>
> :-)
>
> [spamd@sp1 ~]$ spamassassin --lint
> [27054] warn: config: invalid regexp for rule ST_SPACES:
> /\.spaces\.live\.com/$: missing or invalid delimiters
> [27054] warn: lint: 1 issues detected, please rerun with debug enabled for
> more information
>
typo there. remove the '$'.
RE: had it with spaces spam and idiots at hotmail
Posted by RobertH <ro...@abbacomm.net>.
>
> this looks for it, assigns some reasonable scores, and if (add your
> favorite shortcut) bumps it up another 5.
>
> uri ST_SPACES /\.spaces\.live\.com/$
> score ST_SPACES 5 3 4 2
>
> meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET ||
> RCVD_IN_XBL
> || RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
> tflags ST_SPACES_BUMP net
> score ST_SPACES_BUMP 5
>
> --
> Michael Scheidell, CTO
is it just me?
:-)
[spamd@sp1 ~]$ spamassassin --lint
[27054] warn: config: invalid regexp for rule ST_SPACES:
/\.spaces\.live\.com/$: missing or invalid delimiters
[27054] warn: lint: 1 issues detected, please rerun with debug enabled for
more information
- rh
Re: had it with spaces spam and idiots at hotmail
Posted by Randy <rr...@livedatagroup.com>.
Michael Scheidell wrote:
> I have had it with spaces live random url spam. we get thousands of
> them, most from zombots, and idiots at hotmail want a valid live
> account to process the complaint"
>
> "Thank you for reporting spam to the Windows Live Hotmail Support
> Team. This is an auto-generated response to inform you that we have
> received your submission. Please note that you will not receive a
> reply if you respond directly to this message.
> Unfortunately, in order to process your request, Hotmail Support needs
> a valid Windows Live Hotmail hosted account."
>
>
>
> this looks for it, assigns some reasonable scores, and if (add your
> favorite shortcut) bumps it up another 5.
>
> uri ST_SPACES /\.spaces\.live\.com/$
> score ST_SPACES 5 3 4 2
>
> meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET ||
> RCVD_IN_XBL || RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
> tflags ST_SPACES_BUMP net
> score ST_SPACES_BUMP 5
>
We are receiving lots of this. Also look out for the university degree
spam which seems new and using botnet.
Randy Ramsdell
Re: had it with spaces spam and idiots at hotmail
Posted by Bob McClure Jr <bo...@bobcatos.com>.
On Wed, Oct 29, 2008 at 08:13:34AM -0400, Michael Scheidell wrote:
> I have had it with spaces live random url spam. we get thousands of them,
> most from zombots, and idiots at hotmail want a valid live account to
> process the complaint"
>
> "Thank you for reporting spam to the Windows Live Hotmail Support Team.
> This is an auto-generated response to inform you that we have received your
> submission. Please note that you will not receive a reply if you respond
> directly to this message.
> Unfortunately, in order to process your request, Hotmail Support needs a valid Windows Live Hotmail hosted account."
Me, too. There's a good reason they are listed on rfc-ignorant.org.
However, after some digging, I found a place to report the stuff. Go
to
https://support.live.com/eform.aspx?productKey=wlspacesabuse&ct=eformts
Fill in your name and email. For the offender's email, which I don't
know, I put "unknown@live.com". Then fill in the URL of the spamsite.
For the two selection boxes, I put "other" since none of the other
things fit. In the "Please provide as much detail ..." textarea box,
I put "Spamvertised web site:" and follow that with a cut-and-paste of
the entire spam with full headers.
Have at it.
> this looks for it, assigns some reasonable scores, and if (add your
> favorite shortcut) bumps it up another 5.
>
> uri ST_SPACES /\.spaces\.live\.com/$
> score ST_SPACES 5 3 4 2
>
> meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET || RCVD_IN_XBL ||
> RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
> tflags ST_SPACES_BUMP net
> score ST_SPACES_BUMP 5
>
> --
> Michael Scheidell, CTO
> Phone: 561-999-5000, x 1259
> > *| *SECNAP Network Security Corporation
>
> * Certified SNORT Integrator
> * King of Spam Filters, SC Magazine 2008
> * Information Security Award 2008, Info Security Products Guide
> * CRN Magazine Top 40 Emerging Security Vendors
Cheers,
--
Bob McClure, Jr. Bobcat Open Systems, Inc.
bob@bobcatos.com http://www.bobcatos.com
The Lord says: "These people come near to me with their mouth and
honor me with their lips, but their hearts are far from me. Their
worship of me is made up only of rules taught by men. Therefore once
more I will astound these people with wonder upon wonder; the wisdom
of the wise will perish, the intelligence of the intelligent will
vanish." Isaiah 29:13-14 (NIV)