From: Pierre Abbat (phma@webjockey.net)
Date: Thu May 23 2002 - 10:16:23 EDT
On Thursday 23 May 2002 09:50, Hubert Figuiere wrote:
> According to Andrzej Pruszynski <abi@rth.coi.waw.pl>:
> > I received two emails, see headers below:
>
> Yes it is. Those criminals spam any address they find, including
> message-id (which can syntactically be addresses).
>
> I'll try to close the breach.
>
> And I vote for rejecting any HTML e-mail from the server. That should
> be straightforward to do...
I just added the following lines to my procmailrc:
#Spam with "This is an HTML Message !" in the text fork, apparently by
#DiffondiCool
:0 B
* This is a MI\ME Message
* This is an HT\ML Message
* 01BDF6C7.\FABAC1B0
* ! ^Received:
!(my spamtrap)
Apparently anything with that particular hex number in the boundary is spam,
and all the "This is an HTML Message!" spam uses that boundary. Remove the
backslashes before using.
The spammer sent mail to abiword-dev-outgoing. Any mail from outside
abisource.com that is sent to abiword-dev-outgoing should be rejected.
phma
This archive was generated by hypermail 2.1.4 : Thu May 23 2002 - 10:20:43 EDT