SPAM Messages with Subject: "wrote: "

[jonyzinho]

Hi,

I need your help please.

I have a server that receives thousands of SPAM messages with the subject

"Johnny wrote:"
"Katrina wrote:"
"Emerson wrote:"

I have the MailScanner and the Clamavmodule by Chirpy.


How I STOP this stupid SPAM ?

Sorry with my english.

Thanks

Jony

 

[verdon]

You have to add a ruleset to your sares and update rulesdejour. Try this thread http://forums.cpanel.net/showthread.php?t=60856 and another I can't find at the moment Just do some search for recent posts with rulesdejour.

 

[asmithjr]

wrote:

seems as though this wrote: one is getting by even MailScanner.

I put this in the /etc/vfilters/domainname.com file to stop it for that domain.
# Exim filter

if not first_delivery and error_message then finish endif

if
$header_subject: contains "wrote"
then
save "/dev/null" 660
endif

Wonder if appending that to each domain file on the /etc/vfilters directory would work for a server wide filter.

 

[Nhojohl]

I have the same problem...CRAZY anoying... :/

 

[chris8lunch]

Hi,

I need your help please.

I have a server that receives thousands of SPAM messages with the subject

"Johnny wrote:"
"Katrina wrote:"
"Emerson wrote:"

I have the MailScanner and the Clamavmodule by Chirpy.


How I STOP this stupid SPAM ?

Sorry with my english.

Thanks

Jony

I get 100s of these a week, its crazy. Spam is just getting more and more senseless..

 

[wa4fat]

Stop wrote: spam

Most of those "wrote:" emails (which have now stopped for our servers) were pump & dump stock spam. The SARE_STOCKS ruleset for Spamassassin is highly effective for these.

Here's the ruleset: http://www.rulesemporium.com/rules.htm#stocks

All the best -- Bill