Spam

WebFire

WebFire

Perch
Spam is out of control. I don't know how such obvious spam gets through. I would post the subject line here but you would be offended.

What's the deal? These messages shouldn't need trained. They are obvious vulgar sexual porn emails.

X(
 
I get maybe 1 spam mail a day with 100's others filtered out using the same email filters, maybe there is another reason you are getting so many?
 
Just started the last few weeks. Everything was fine then, BAM. Vulgor emails.

Even at the lowest settings I would think these would be picked up.
 
I changed spam settings to see what happens. But they've been working fine since you implemented this spam system. Why would it change now?
 
I can't prove it but I have doubts about how well the graylisting in DSpam really works. I look after a school's MS Exchange server and for six months or so we had mail configured so that it came into JodoHost and was forwarded to the school. I wanted to use JodoHost's spam filters and also keep my options open in case our DSL line was down for a while I could quicky define pop mailboxes at JodoHost.

Spam was a big problem. I spent a lot of time checking settings, sending false positives and false negatives to support etc but we finally gave up on JodoHost's spam filtering. We moved the MX to point directly to the school's server and I installed ASSP. The reduction in spam was quite dramatic. Most of it seems to be the result of ASSP's graylisting working well.

I don't want to be unfair so don't read too much into that, perhaps there was something else going on but that was my observation.

Cheers
Ross
 
webFire, can you please send some of the recent emails (past 72 hours).
Please send as plain text file and not Ms-Outlook specific ".msg".

Ross, ASSP is really nice stuff. We thought about using it, but it is just too aggressive for our needs. And we are no longer greylisting.
 
tanmaya said:
Ross, ASSP is really nice stuff. We thought about using it, but it is just too aggressive for our needs. And we are no longer greylisting.
Click to expand...

I'm surprised that you found ASSP to be too aggressive. It's very configurable. I think it would be unsuitable for JodoHost for other reasons. The main reason being that there are no per user settings and only one whitelist for everyone. One user could easier pollute the whitelist. Its very good for a relatively small "related" group of users like in a small company.

It's a pity you had to give up on greylisting. It seems very effective. I guess you found too many servers not retrying properly. I haven't noticed any problems with that but with only 15 users I'm kind of operating on a different scale :)

Ross
 
tetranz said:
I'm surprised that you found ASSP to be too aggressive. It's very configurable.
Click to expand...

Yes it is. Without whitelisting and Bayesian training you can't cater a bigger group of people. Specifically emails from websites can be badly composed (from headers to contents). Problem worsens with the bigger client base.

tetranz said:
I think it would be unsuitable for JodoHost for other reasons. The main reason being that there are no per user settings and only one whitelist for everyone. One user could easier pollute the whitelist. Its very good for a relatively small "related" group of users like in a small company.
Click to expand...
Agreed.
It is unsuitable for us for other reasons as well, with performance being the primary reason. You need something different to handle big number of SMTP connections our gateways handle per second. Botnet attacks just makes it even worse.

tetranz said:
It's a pity you had to give up on greylisting. It seems very effective. I guess you found too many servers not retrying properly.
Click to expand...
We were initially using greylisting for dynamic IPs only.
Now we don't accept email from them at all from them at our anti-spam gateways.
And yes we were never able to go for complete greylisting due to big number of complaints of varied nature.
 
tanmaya said:
webFire, can you please send some of the recent emails (past 72 hours).
Please send as plain text file and not Ms-Outlook specific ".msg".

Ross, ASSP is really nice stuff. We thought about using it, but it is just too aggressive for our needs. And we are no longer greylisting.
Click to expand...

Please let me know how to send these to you. I have sent as text files and you told me to send it another way. I am confused. I am using Outlook 2003.

BTW, this spam is ridiculous. Don't know why I would get it and not someone else. Seems like very basic filtering to me.
 
For Outlook 2003, do it this way:
1. Open the email and go to View -> Options.
2. Copy the contents of "Internet headers" in a text file and send it over.
 
I gave up and resubscribed to Cloudmark. These emails SHOULD NOT need trained. They are downright filthy x-rated porn emails. I don't see how a spam system could "forget" that these are spam.

I sent you a few last week and you trained DSPAM, and it was better....for 1 day. :rolleyes:

Oh well, can't have everything we should, right?
 
WebFire said:
They are downright filthy x-rated porn emails.
Click to expand...

Oh oh, Jodo's site hits just went thru the roof. :)

But seriously, I don't experience any spam problems, but that may be because I create aliases every time I need to give out an email address to a site. Whatever I subscribe to gets a different alias. Only takes a minute. That way it's easy to delete an abused address, and I can see how it got out into the wild.

Had to change my ISP account once because of uncontrollable spam. Since then I don't use my ISP addy for *anything*, not even personal email. The result - no spam at all. I don't even run a filter.
 
I get a few spams sometimes mostly new invetive ways to advertise some ****** URL on the sly words mean nothing on most of them just random sentence with one url.

We get tickets like this sometimes about matters that are legit tickets too. :(
 
It's not the amount of spam I guess that I am complaining about. It is the fact that it is not being marked spam. No way in hell these should not be marked.

I know I will get a lot of spam. I have had the same email address for years and it surely has been around the block. I just want to direct the spam to my spam folder.

DSPAM was doing awesome until about 2 months ago. Then it seemed as if someone turned it off. Unmarked spam starting pouring in like an open faucet. No spam setting changes on my end.

I have a couple clients on another host who get hammered with spam. I was bragging about our spam filtering, and am going to switching their hosting to me. But now I am worried that I will be blowing smoke at them.

So why are these nasty emails not getting marked?
 
you have sent samples to us?
The thing is what looks obvious to a human can get past automated systems. They change something very minor and it circumvents rules, they make it look more nad more like legit mails, etc.
 
Yes I have sent some samples. I know spam changes and evolves to beat the system. But that is why I am confused. There is no way the subjects of these emails should not get flagged. There is not trickery. It is 100% nasty words. Complete dictionary (some not, lol) words.

Don't make me post one. :D
 
You must log in or register to reply here.
Back
Top