Re: Lots of 419/scam and investment spams getting through suddenly

[RW <rw...@googlemail.com>]

On Fri, 19 Jun 2009 16:30:29 -0700
SM <sm...@resistor.net> wrote:

> At 15:36 19-06-2009, McDonald, Dan wrote:
> >Of course.  Don't you?  Although usually the Nigerians relay through
> >Italy, and sometimes Hong Kong.
> 
> I don't see any email of that type originating from Nigeria in terms 
> of SMTP.  Most of these emails originate from other 
> countries.  Blocking Italy or Hong Kong won't help that much because 
> of the mode of operation of these senders.

The last hop into the internal network is rarely from Nigeria, but I
find it turns up in X-Spam-Relay-Countries in about 9% of my own spam.

Re: Lots of 419/scam and investment spams getting through suddenly

[SM <sm...@resistor.net>]

At 17:26 19-06-2009, RW wrote:
>The last hop into the internal network is rarely from Nigeria, but I
>find it turns up in X-Spam-Relay-Countries in about 9% of my own spam.

Can you send me a sample of the email headers off-list?

Regards,
-sm