Annoying Job Offer spam

[Ron McKeating <R....@lboro.ac.uk>]

Is it just us or is there a flood of spams subject job offer, is there
any of the rulesets that take care of this ?

Ron
-- 
Ron McKeating
Senior IT Services Specialist
Computing Services
Loughborough University
01509 222329

Re: Annoying Job Offer spam

[Duncan Hill <sa...@nacnud.force9.co.uk>]

On Wednesday 06 April 2005 16:33, Jeff Chan typed:

> I'm not getting any of those, but I am seeing a lot of stock
> spams.

Ditto, but pretty much all of them are hitting high bayes + other local rules 
aimed at stock stuff.  The stox guy morphed, but the morph was so trivial it 
was funny.

Re: Annoying Job Offer spam

[Jeff Chan <je...@surbl.org>]

On Wednesday, April 6, 2005, 8:12:51 AM, Ron McKeating wrote:
> Is it just us or is there a flood of spams subject job offer, is there
> any of the rulesets that take care of this ?

I'm not getting any of those, but I am seeing a lot of stock
spams.

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/

Re: Annoying Job Offer spam

[Kevin Peuhkurinen <ke...@meridiancu.ca>]

Ron McKeating wrote:

>Is it just us or is there a flood of spams subject job offer, is there
>any of the rulesets that take care of this ?
>
>Ron
>  
>
I see a few of them in my quarantine.   They're all about the selling of 
raw minerals or something.    They're all hitting BAYES_99, Razor2, and 
various blacklists.  The lowest number of hits I see on any of them is 
13.   If you aren't using Bayes, Razor, or the DNS blacklists, you may 
want to get 70_sare_header0.cf as they are also all hitting SARE_XMAIL_RLSP.

Re: Annoying Job Offer spam

[Matthew Newton <mc...@leicester.ac.uk>]

Hi

On Wed, Apr 06, 2005 at 04:12:51PM +0100, Ron McKeating wrote:
> Is it just us or is there a flood of spams subject job offer, is there
> any of the rulesets that take care of this ?

It's not just you. I had over 3500 spams sent here since midnight with
subjects of either "Zeta (munged) Trade" and "need (munged) employee". I
created some very simple high-scored rules to block them, so they ceased
around 10am.

I also noticed that I had 15 or so of the need -- employee ones at my
Lboro account, so I guess you got that one, too.

The rules I put in are at the web site below. I wouldn't normally use
such high scores, and these will be coming out soon (or being rewritten
to be less drastic).

  http://www.le.ac.uk/cc/mcn4/spam/uolcc.cf

  see rules UOLCC_RD_ICQ
            UOLCC_MAKE_MONEY
            UOLCC_RUSDELUXE
            UOLCC_RUSDELUXE1
            UOLCC_RUSDELUXE2
            UOLCC_ZETA_TRADE
            UOLCC_ZETA_TRADE

Matthew


-- 
Matthew Newton <mc...@le.ac.uk>

UNIX and e-mail Systems Administrator, Network Support Section,
Computer Centre, University of Leicester,
Leicester LE1 7RH, United Kingdom