cancel
Showing results for 
Search instead for 
Did you mean: 

Spam increase

Marco
Grafter
Posts: 69
Registered: 06-08-2007

Spam increase

When you moved to postini my spam dropped to a few a week. I don't know what's changed recently, but I'm back to a dozen or more per day. The spam\not spam buttons only work for one message at a time (and sometimes you have to press twice)
All small fry in the scheme of things, but irritating
I now get far less spam from my Yahoo account than my Plusnet email. Amazing
18 REPLIES
Superuser
Superuser
Posts: 9,138
Thanks: 546
Fixes: 46
Registered: 06-04-2007

Re: Spam increase

After several weeks with just the occasional spam message I now get several a day, normally flagged by Postini as spam though some are missed by PlusNet's current scoring rules.
So I guess the spammers are now better at evading blatant spam (edge) blocking.
David
Midville
Grafter
Posts: 376
Registered: 05-04-2007

Re: Spam increase

It has increase for my account also, it was 1 / 2 a day but now it is 6 / 7. It has only increased the last week or so.
Marco
Grafter
Posts: 69
Registered: 06-08-2007

Re: Spam increase

Now I have 17 messages like the one below, all sent at 11pm on Monday:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
  spam@spamtraining.plus.com
------ This is a copy of the message, including all the headers. ------
Blah, blah blah
PhyllisTyne
Aspiring Pro
Posts: 604
Thanks: 31
Fixes: 3
Registered: 30-08-2007

Re: Spam increase

I am now getting several a day. mainly from Viagra @ Official site that tell me I have subscibed to MSN mailings which I have not!
PT
Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Spam increase


Just checked one of my heavily SPAM laden accounts, I delete the content of inbox.spam regularly so I only have 16 message in there at the moment, there were 5 messages from 'VIAGRA ® Official Site', only one message was not put into inbox.spam. So it is mostly working!
SW.
--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed
Community Veteran
Posts: 26,538
Thanks: 776
Fixes: 9
Registered: 10-04-2007

Re: Spam increase

Are you using Postini quarantine? - if not I'd like to see the headers of the one that got through.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Spam increase


The one that go through:
Quote
Return-path: <steve@godseesyou.com>
Envelope-to: xxxx@yyyy.plus.com
Delivery-date: Thu, 08 May 2008 03:18:58 +0100
Received: from exprod5mx241.postini.com ([64.18.0.161] helo=psmtp.com)
    by pih-sunmxcore09.plus.net with smtp (PlusNet MXCore v2.00) id 1Jtvik-0004WI-A7
    for xxxx@yyyy.plus.com; Thu, 08 May 2008 03:18:58 +0100
Received: from source ([68.203.77.139]) by exprod5mx241.postini.com ([64.18.4.11]) with SMTP;
    Wed, 07 May 2008 22:18:56 EDT
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:57 -0600 (envelope-from <steve@godseesyou.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxx@yyyy.plus.com>>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-pstn-levels: (S: 0.00000/ 9.54914 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxx@yyyy.plus.com> forward (org good) [237/10]
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: RE: May 72% OFF

And one that was moved to inbox.spam
Quote
Return-path: <laj@gwbdge.com>
Envelope-to: xxxx@yyyy.plus.com
Delivery-date: Wed, 07 May 2008 10:58:07 +0100
Received: from exprod5mx229.postini.com ([64.18.0.115] helo=psmtp.com)
    by pih-sunmxcore12.plus.net with smtp (PlusNet MXCore v2.00) id 1JtgPX-0006iG-2z
    for xxxx@yyyy.plus.com; Wed, 07 May 2008 10:58:07 +0100
Received: from source ([77.205.189.83]) by exprod5mx229.postini.com ([64.18.4.13]) with SMTP;
    Wed, 07 May 2008 02:58:01 PDT
Content-Return: allowed
X-Mailer: CME-V6.5.4.3; MSN
Message-Id: <20080507125807.6919.qmail@makouill-ur4wn9>
To: <xxxx@yyyy.plus.com>
From: VIAGRA ® Official Site <xxxx@yyyy.plus.com>
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-pstn-levels: (S: 0.00000/25.24003 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxx@yyyy.plus.com> forward (org good) [237/10]
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: Dear xxxx@yyyy.plus.com May 80% 0FF

The one that go through seems to be missing the line X-pn-pstn: Spam 1/2/3/4/5 from the header.
SW.
--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed
Community Veteran
Posts: 26,538
Thanks: 776
Fixes: 9
Registered: 10-04-2007

Re: Spam increase

I can't see any reason why the PN systems should have failed to add the X-pn-pstn: Spam 1 header. One for Bob to look at I think.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
Community Gaffer
Community Gaffer
Posts: 12,999
Thanks: 784
Fixes: 70
Registered: 04-04-2007

Re: Spam increase

Quote from: Marco
Now I have 17 messages like the one below, all sent at 11pm on Monday:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

We had a problem with the spam training address earlier in the week that may have resulted in a few bounces like this.
@godsell4, I concur with jelv, I can see no reason why the first email did not have the relevant headers added to it. Perhaps you can PM me the full message headers/content?

Bob Pullen
Plusnet Products Team
If I've been helpful then please give thanks ⤵

Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Spam increase

PM sent.
--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed
ChrisL
Grafter
Posts: 733
Thanks: 2
Registered: 13-12-2007

Re: Spam increase

The first one had an 'envelope-from' address that the second didn't
Quote
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:57 -0600 (envelope-from <steve@godseesyou.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxx@yyyy.plus.com>>

Might this have been enough to throw off the Plusnet-relay checkHuh
Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Spam increase

Got another one I think.
The common thing in the headers are the reference to pih-sunmxcore09.plus.net as the server that delivered it.


Bob, just sent you another PM to look at a different mailbox that has four of these delivered to inbox.
SW.
--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed
Community Gaffer
Community Gaffer
Posts: 12,999
Thanks: 784
Fixes: 70
Registered: 04-04-2007

Re: Spam increase

Can you PM me the full headers again or give me an indication as to what the subject line and delivery date is (presuming you've moved it to your Spam folder now)

Bob Pullen
Plusnet Products Team
If I've been helpful then please give thanks ⤵

Community Veteran
Posts: 3,364
Thanks: 15
Registered: 06-04-2007

Re: Spam increase

Done.
Message 1
Quote
Return-path: <dwhite@godseesyou.com>
Envelope-to: xxxxx@yyyy.plus.com
Delivery-date: Thu, 08 May 2008 03:19:00 +0100
Received: from exprod5mx233.postini.com ([64.18.0.119] helo=psmtp.com)
    by pih-sunmxcore14.plus.net with smtp (PlusNet MXCore v2.00) id 1Jtvil-0000H6-HW
    for xxxxx@yyyy.plus.com; Thu, 08 May 2008 03:18:59 +0100
Received: from source ([68.203.77.139]) by exprod5mx233.postini.com ([64.18.4.11]) with SMTP;
    Wed, 07 May 2008 19:18:57 PDT
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:58 -0600 (envelope-from <dwhite@godseesyou.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxxx@yyyy.plus.com>>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-pstn-levels: (S: 0.00000/ 9.80402 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxxx@yyyy.plus.com> forward (org good) [237/10]
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: RE: May 72% OFF

Message 2:
Quote
Return-path: <feedback@gods-embassy.com>
Envelope-to: xxxxx@yyyy.plus.com
Delivery-date: Thu, 08 May 2008 03:18:59 +0100
Received: from exprod5mx241.postini.com ([64.18.0.161] helo=psmtp.com)
    by pih-sunmxcore12.plus.net with smtp (PlusNet MXCore v2.00) id 1Jtvik-0003m0-Fd
    for xxxxx@yyyy.plus.com; Thu, 08 May 2008 03:18:58 +0100
Received: from source ([68.203.77.139]) by exprod5mx241.postini.com ([64.18.4.11]) with SMTP;
    Wed, 07 May 2008 22:18:56 EDT
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:57 -0600 (envelope-from <feedback@gods-embassy.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxxx@yyyy.plus.com>>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-pstn-levels: (S: 0.00000/ 9.80402 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxxx@yyyy.plus.com> forward (org good) [237/10]
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: RE: May 72% OFF

Message 3:
Quote
Return-path: <uwdg@godseesyou.com>
Envelope-to: xxxxx@yyyy.plus.com
Delivery-date: Thu, 08 May 2008 03:18:56 +0100
Received: from exprod5mx230.postini.com ([64.18.0.116] helo=psmtp.com)
    by pih-sunmxcore10.plus.net with smtp (PlusNet MXCore v2.00) id 1Jtvih-0007RW-QU
    for xxxxx@yyyy.plus.com; Thu, 08 May 2008 03:18:56 +0100
Received: from source ([68.203.77.139]) by exprod5mx230.postini.com ([64.18.4.11]) with SMTP;
    Wed, 07 May 2008 19:18:53 PDT
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:54 -0600 (envelope-from <uwdg@godseesyou.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxxx@yyyy.plus.com>>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-pstn-levels: (S: 0.00000/ 9.54914 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxxx@yyyy.plus.com> forward (org good) [237/10]
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: RE: May 72% OFF

Message 4:
Quote
Return-path: <jgangemi@godseesyou.com>
Envelope-to: xxxxx@yyyy.plus.com
Delivery-date: Thu, 08 May 2008 03:18:56 +0100
Received: from exprod5mx211.postini.com ([64.18.0.70] helo=psmtp.com)
    by pih-sunmxcore09.plus.net with smtp (PlusNet MXCore v2.00) id 1Jtvih-0004Tn-Gv
    for xxxxx@yyyy.plus.com; Thu, 08 May 2008 03:18:55 +0100
Received: from source ([68.203.77.139]) by exprod5mx211.postini.com ([64.18.4.11]) with SMTP;
    Wed, 07 May 2008 19:18:53 PDT
Received:from Katelyn Alba(10.14.13.15) by jazz-04010206 (PowerMTA(TM) v3.2r4) id hfp97o46d54j23 for <xxxxx@yyyy.plus.com>; Wed, 7 May 2008 08:18:54 -0600 (envelope-from <jgangemi@godseesyou.com>)
Message-Id: <58113.0314021817.02601868977361-9479@cimail85.msn.com>
To: <xxxxx@yyyy.plus.com>
From: Viagra ® Official Site <xxxxx@yyyy.plus.com>>
MIME-Version: 1.0
Importance: High
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-pstn-levels: (S: 0.00000/ 8.58118 CV:99.0000 R:95.9108 P:95.9108 M:95.5423 C:51.8443 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m C
X-pstn-addresses: from <xxxxx@yyyy.plus.com> forward (org good) [237/10]
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: RE: May 72% OFF

SW.
--
3Mb FTTC
https://portal.plus.net/my.html?action=data_transfer_speed