You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Martin Gregorie <ma...@gregorie.org> on 2009/04/02 01:11:38 UTC
Spam from an odd alias
Has anybody else noticed spam coming from dmulk.com?
It seems to be associated with Yahoo: its in their IP space, has MX
addresses pointing to Yahoo mailservers, is a cname for one of Yahoo's
servers. www.dmulk.com is a Californian biker's blog so its probably
within the Yahoo blogosphere.
Martin
Re: Spam from an odd alias
Posted by "McDonald, Dan" <Da...@austinenergy.com>.
On Thu, 2009-04-02 at 14:36 +0100, Martin Gregorie wrote:
> On Thu, 2009-04-02 at 08:11 -0500, McDonald, Dan wrote:
> > On Thu, 2009-04-02 at 00:11 +0100, Martin Gregorie wrote:
> > > Has anybody else noticed spam coming from dmulk.com?
> > yes, but with a comma instead of a period.
> >
> indeed and with no visible text. However, being ineffective doesn't make
> it less of a nuisance, especially as it's getting past greylisting.
>
I think I saw it being caught by one of the SaneSecurity signatures....
[digs through logs and quarantine...]
Yes, Sanesecurity.Malware.10859.UNOFFICIAL appears to catch it nicely.
I've caught 800 of them this week...
--
Daniel J McDonald, CCIE #2495, CISSP #78281, CNX
Austin Energy
http://www.austinenergy.com
Re: Spam from an odd alias
Posted by "McDonald, Dan" <Da...@austinenergy.com>.
On Thu, 2009-04-02 at 00:11 +0100, Martin Gregorie wrote:
> Has anybody else noticed spam coming from dmulk.com?
yes, but with a comma instead of a period.
At least it was a link to www.dmulk,com
--
Daniel J McDonald, CCIE #2495, CISSP #78281, CNX
Austin Energy
http://www.austinenergy.com