The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SPAM Messages with Subject: "wrote: "

Discussion in 'General Discussion' started by jonyzinho, Nov 27, 2006.

  1. jonyzinho

    jonyzinho Active Member

    Joined:
    Apr 2, 2005
    Messages:
    39
    Likes Received:
    0
    Trophy Points:
    6
    Hi,

    I need your help please.

    I have a server that receives thousands of SPAM messages with the subject

    "Johnny wrote:"
    "Katrina wrote:"
    "Emerson wrote:"

    I have the MailScanner and the Clamavmodule by Chirpy.


    How I STOP this stupid SPAM ?

    Sorry with my english.

    Thanks

    Jony
     
  2. verdon

    verdon Well-Known Member

    Joined:
    Nov 1, 2003
    Messages:
    836
    Likes Received:
    2
    Trophy Points:
    18
    Location:
    Northern Ontario, Canada
    cPanel Access Level:
    Root Administrator
  3. asmithjr

    asmithjr Well-Known Member

    Joined:
    Jun 13, 2003
    Messages:
    475
    Likes Received:
    1
    Trophy Points:
    18
    wrote:

    seems as though this wrote: one is getting by even MailScanner.

    I put this in the /etc/vfilters/domainname.com file to stop it for that domain.
    # Exim filter

    if not first_delivery and error_message then finish endif

    if
    $header_subject: contains "wrote"
    then
    save "/dev/null" 660
    endif

    Wonder if appending that to each domain file on the /etc/vfilters directory would work for a server wide filter.
     
  4. Nhojohl

    Nhojohl Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    101
    Likes Received:
    0
    Trophy Points:
    16
    I have the same problem...CRAZY anoying... :/
     
  5. chris8lunch

    chris8lunch Well-Known Member

    Joined:
    May 27, 2006
    Messages:
    160
    Likes Received:
    0
    Trophy Points:
    16
    I get 100s of these a week, its crazy. Spam is just getting more and more senseless..
     
  6. wa4fat

    wa4fat Well-Known Member

    Joined:
    Dec 30, 2001
    Messages:
    51
    Likes Received:
    1
    Trophy Points:
    8
    Stop wrote: spam

    Most of those "wrote:" emails (which have now stopped for our servers) were pump & dump stock spam. The SARE_STOCKS ruleset for Spamassassin is highly effective for these.

    Here's the ruleset: http://www.rulesemporium.com/rules.htm#stocks

    All the best -- Bill
     
Loading...

Share This Page