Re: [Exim] common pattern in spam involving exim 4.34

Top Page
Delete this message
Reply to this message
Author: Alan J. Flavell
Date:  
To: Exim users list
Subject: Re: [Exim] common pattern in spam involving exim 4.34
On Sun, 4 Jul 2004, Suresh Ramasubramanian wrote:

> 2. gone and installed a copy of Matt Wright's formmail or similar on that box


That's usually evident from an inspection of the actual body content,
though?

Unfortunately, spamcop seems to have stopped publicising the text of
received spams (at any rate to non subscribers), and these IPs don't
seem to have got reported to nana* group(s) recently.

> 3. is a spammer and has installed a bulkmail cgi script


The ISP for those addresses seems to have a long-standing history of
hosting spammers, according to
http://www.five-ten-sg.com/blackhole.php?67.18.88.244

although not egregious enough to earn more widespread blacklisting
entries (aside from current entries in Spamcop, but they're both only
about a day old, as I read it).

h.t.h