cancel
Showing results for 
Search instead for 
Did you mean: 

Spam Spam Spam not so wonderful Spam

wheelnut
Grafter
Posts: 102
Registered: 01-08-2007

Spam Spam Spam not so wonderful Spam

Over the past 2 or 3 weeks I have been inundated (well, quite a few anyway) with the old viagra emails which have allegedly got through the PlusNet spam filter. On futher investigation of the headers it actually says:-

x-open-relay: 84.77.167.200 is in a black list at bl.spamcop.net

- so why don't PlusNet block themHuhHuh?
22 REPLIES
Njal
Grafter
Posts: 290
Registered: 30-07-2007

Spam Spam Spam not so wonderful Spam

Can't answer your question as to why they're not blocked. I pick up most of my mail via my Demon account, and If it's any consolation they're getting through Demon's Brightmail filters as well!

K9 has a good reputation as a spam filter:

http://keir.net/k9.html

"K9 is an email filtering application that works in conjunction with your regular POP3 email program and automatically classifies incoming emails as spam (junk email) or non-spam without the need for maintaining dozens of rules or constant updates to be downloaded. It uses intelligent statistical analysis that can result in extremely high accuracy over time."

I don't have any direct experience of K9 as I don't get enough spam to worry about, but it appears to be highly thought of in some newsgroups that I frequent.

Regards
Neil
N/A

Spam Spam Spam not so wonderful Spam

Yup, I'm also getting 20-30 of these a day (up from 3 or 4 a week a month ago Sad )..

All to my postmaster account - not to my mail boxes (which get used far more often)..

Why is that? Pretty much the only place the postmaster address gets used is in correspondence with plusnet.

I've long been nervous of using this forum because plusnet insists we use our user name to post here.
Could this be where thay are finding our email addresses?

Either way, I don't think it's a good idea for user names to be permanently displayed on a public forum.
N/A

Spam Spam Spam not so wonderful Spam

This is the reason I have come on this forum now, to see if anyone else gets this crap.
I also get about 20 a DAY, subject line VIAGRA with usually one character changed. This has rocketed in the last month or so from about 3 a day. I use mailwasher pro before I download anything, I bounce this junk back but doesn't seem to make any difference.

What are plusnet doing about this? It's annoying having to plough through this lot to get to emails we *do* want to read.

Probably nothing because it doesn't make them any money.

Mine are also to my postmaster addy, same again, it's my username on here.
tangey
Grafter
Posts: 143
Registered: 29-08-2007

Spam Spam Spam not so wonderful Spam

me too on all of the above
N/A

Spam Spam Spam not so wonderful Spam

I never use my plusnet Email and I never get any spam to it either. The only Email I have ever received to it are from plusnet.

Because of this I suspect that your address isn't being picked up from your username on the forums....
Laugh
Grafter
Posts: 470
Registered: 07-08-2007

Spam Spam Spam not so wonderful Spam

Quote
All to my postmaster account - not to my mail boxes (which get used far more often)..

Why is that? Pretty much the only place the postmaster address gets used is in correspondence with plusnet.

I think that this is because your postmaster account picks up all mail that cannot be directed to a specific mailbox.
You might have Fred and Nancy Smith who are on PlusNet so their e-mail would be:
fred@smith.plus.com and
nancy@smith.plus.com
The spam engine may have picked up on the @smith.plus.com suffix and tries a few prefixes of its own.
david@smith.plus.com, for example, would not match with any mailbox but it would match with @smith.plus.com and would therefore be routed to the postmaster account.

I hope this helps - it made sense in my head - I just hope it translates to the written word. :?
oliverb
Grafter
Posts: 606
Registered: 02-08-2007

Spam Spam Spam not so wonderful Spam

Quote
I hope this helps - it made sense in my head - I just hope it translates to the written word. :?


I see a lot of spam like that too, I've also seen our domain combined with fictitious names in forged return addresses.

It looks like the filter on medium is stopping roughly one in two spam.
N/A

Reverse dns.

Also if have a static IP the Reverse DNS points to username.plus.com

so when you visit a website with dodgy popup adverts it grabs your IP does a reverse lookup on it to get the name then posts email to postmaster@username.plus.com

then when it doesnt bounce your are on a list..


you can ask to have your reverse dns for your IP to be changed.

This will only help if your are not on any lists.
N/A

Re: Reverse dns.

Quote
then when it doesnt bounce your are on a list..

You can bounce them back with mailwasher, I do.
It doesn't seem to make any difference.
shermans
Rising Star
Posts: 1,038
Thanks: 27
Fixes: 1
Registered: 07-09-2007

Spam Spam Spam not so wonderful Spam

A lot of this spam generated as a result of third party on line transactions. If I have to deal with anyone whom I am not likely to be in regular contact, then I use my Tiscali payg account using of course my Plusnet BB connection. That way, I only then ever look at the Tiscali account when I am expecting a communication from someone specific, but also once a week, I log in and delete all the other emails without even looking at the subjects.

Obviously, some spam still gets through to my Plusnet account, but usually I find the cause is due to an email link on a webpage which I have - I have now removed the automatic maito: link on the website, and the spam has reduced again back to acceptable levels.

Most of the spam ends up with Tiscali. Basically, if I have no knowledge of someone or have reason to distrust the source or am dealing with a vendor on-line, then I always use the Tiscali account. Day to day email correspondence with people I know is only conducted on the Plusnet account.

Not a perfect solution, but a manageable one. I know that most spam is the result of occasional contact during on-line transactions, and not as a consequence of Plusnet in any way.
oliverb
Grafter
Posts: 606
Registered: 02-08-2007

Spam Spam Spam not so wonderful Spam

I wouldn't try that, AFAIK mailwasher uses the sender address from the message header. Most spam I've seen appears to forge this, so all the bounce does is annoy someone else.

BTW I tend to take the view that if bounce message contains the entire spam message then the bounce message is also spam and the sender should be treated accordingly otherwise it would be too easy for spammers to add a bogus bounce header to their messages to escape listing.
Community Veteran
Posts: 1,160
Thanks: 1
Registered: 01-08-2007

Spam Spam Spam not so wonderful Spam

Besides the usual 'medication' and cheap software spam, we're currently being sent numerous stocks and shares tips and special offers on prestige brand watches. Other times, people have been intent on selling us degrees.

Looking at the address generally used and the 'to' name associated with it, most are probably as a result of a friend's address book being hijacked by a virus of some sort, leading to that address getting out into the spamming 'community'.

I used to report all spam to SpamCop but it got too much of a chore, especially after they started including the PlusNet 'virus free' link at the end in the list of sites to be reported, meaning that I had to open each file and delete that message before I sent it on to them ! Agreed that it's not much use bouncing the emails as that only confirms they arrived even if not actually opened.

Recently, there seems to have been an increase in apparently pointless spam, with just a brief message and no links or information, not even hidden ones - sometimes I try clicking on 'reply' and/or looking at the raw message source to find stuff that's been done white on white. The only 'use' I can see in this is to clog up email systems.

I don't mind getting Nigerian scams and all their variations so much, as they make for amusing reading!
Plusnet user since November 2003
Currently on Unlimited Fibre Extra and Unlimited UK & Mobile Calls
shermans
Rising Star
Posts: 1,038
Thanks: 27
Fixes: 1
Registered: 07-09-2007

Spam Spam Spam not so wonderful Spam

I am puzzled by some of the spam which I have seen lately - just a load of unintelligle hierogyphics - the natural inclination is to suspect it contains a virus but that is definitely not the case.

So what purpose can this possibly serve ? Is it just to be annoying ? Anyone out there know the answer ?
Community Veteran
Posts: 2,849
Thanks: 156
Fixes: 2
Registered: 05-04-2007

Spam Spam Spam not so wonderful Spam

Yep, pretty pointless trying to bounce. I've even received legitimate e-mails from say university mail servers in the US to say they rejected a junk mail which of course I haven't sent - the cunts have used my e-mail in the from field which of course has resulted in the auto-response saying my mail was rejected. Luckily it's not my PlusNet account, but one from a prior ISP which now gets about 100 spams per day.

I am finding though that more and more spam are posting complete gibberish in the content, then attaching a .gif, .jpeg which if opened (which most web-based mail clients no longer do by default), is the 'Stock Alert'. Of course the classic scam where they try and get people to buy shares in a low-value company to increase the stock value (hence make the spammers money).

I've also got the classic 'we're charging your credit card for a couple of hundred quid for something you've never bought, but can you open our malware invoice to check which will install a keylogger internet banking trogan'. I've had one really strange one about a time machine (which was weird as it had no C1alis link, etc. for the spammers), had I kept that I would have posted it as that was really stange.

The one which made me laugh recently was a phising spam mail, where the fruadsters couldn't even be bothered to set up a fake web site. It told me there was fraud on my account, and could I reply back with my credit card number to the from address the e-mail came from.

Hmm .... :twisted: