[NTLUG:Discuss] spam

[agoats at compuserve.com]

I'm cross posting to both sites on purpose for everyone's benefit....

On the DFWUUG site, we did 3 things that have been successful so far:

1)  ASCII/Plain Text only.  Kills off all rich text and html messages. 
It's a bit inconvenient with recruiters, but it's better than being 
spam'd to death.

2)  NO attachments.  This gets rid of those who send in plain text with 
an attachment. This includes those pesky vcf files that a lot of people 
use as a business card.

3)  Posts can ONLY get through IF the e-mail is from a MEMBER. This 
means the Members list is scanned to verify the poster's e-mail  is in 
the members list before the message can be sent out. Spoofing might get 
through if it's configured exactly just right, but not very likely.

This adds to the work of the Mailman Admin as the Admin should have 
content filtered messages sent to them as well as some of the bounces. 
Content filtered is how I find the recruiter's mail messages and send 
them on to the DFWUUG list and why I'm the most prolific "poster". 
Bounces catches some of the other posts including spam, so *I* get 
spam'd and not the list. FWIW, most of the spam is coming from Russia at 
the moment though China was in the lead at the beginning of the year.

I've noticed the DFWUUG is going to illegal web sites and I'm supposed 
to fill out a document to send to the FBI. Looks legit, but.... 
attachment is a zipped windows executable file. Also, the fbi.gov is a 
spoofed e-mail header. I haven't scanned it yet for what type of virus, 
trojan or rootkit it is, but watch out for phishing, it's really bad out 
there.

Alvin

Gilbert Morrow wrote:
> Oh thank God , I thought NTLUG had sold out and starting allowing members to
> use list as sales contacts.
> Have gotten same one twice now .
>
> Sent from the original Droid.
> On May 14, 2011 11:16 AM, "Ralph Green" <sfreader at sbcglobal.net> wrote:
>   
>> Howdy,
>>  Does anyone have an idea how this spam is getting through to the list?
>> Our list has been nicely spam-free until the last couple of days.
>> Ralph
>>
>>
>>
>> _______________________________________________
>> http://www.ntlug.org/mailman/listinfo/discuss
>>     
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
>
>