Mega SPAM

[XoK]

Hi,

It is normal do receive a huge amount of SPAM ?

I mean.. I have in my GMail account 37551 messages (and growing) on the spam box!
I use GMail box because of its excelent filters

They are making permutations aa, ab, ac, ad, ae ... @domain.tld

Seems like a huge stupidity to me..

[Frank Broughton]

Yes gmail has excellent SPAM filters. Are you asking if it is normal to get much SPAM here at JaguarPC? So you know - JaguarPC does not use SPAM filtering by default. You have to enable spamassassin in Cpanel for your accounts.

There have been some good discussions on spamassassin here lately. Do a search above for spam assassin.

Also a new product called ASSP is available - new version (major upgrade) is supposed to be released tomorrow. If you have a VPS it looks like a good option as it uses way less RAM that Spamassassin and has some powerful features that make administering spam easier.

[Vin DSL]

Yes, "a huge amount of SPAM" is normal...

I used to get, like, 50k spams a day here!

Gmail is a different matter -- let me go look -- I have a couple of accounts there...

Um... I have 58 spams in one account (deleted now).

I have 255 in the other (deleted now).

Let's check Yahoo!... 1629 in one account (deleted).

947 in the other account (deleted).

Lycos.uk.. 319...

Yep, I guess spam is normal!

[Vin DSL]

There have been some good discussions on spamassassin here lately. Do a search above for spam assassin...

I have the situation under control here at JagPC, using SA!

I'm probably getting 20 unflagged spams per day here, across all accounts, compared to 50k per day a while back...

SA rocks! I wish I had this control elsewhere!

I'm now getting a lower amount of spam here than elsewhere...

[XoK]

Just wondering why they do permutations... its like 1 in 25.000 that should be valid.

I am not worried because they not get GMail full...

Bring it on

[jason]

Its a guerrilla tactic basically--spammers send mail as many different possible email addresses as possible in the hopes that some of them work. Since a lot of the spam you get comes from botnets (networks of computers compromised by trojans) it doesn't cost the spammers anything to do that kind of sending.

--Jason

[Frank Broughton]

On a VPS a good install for dictionary attacks is: http://www.configserver.com/free/eximdeny.html

If the sender server tries four email addresses that do not exist on your server this disconnects the session with the sender server (DROP) and puts the IP address of the sender server into /etc/exim_deny

If the sender server connects again, this install will first check /etc/exim_deny and if it finds the senders IP address there the session is immediately disconnected.

The amount of emails before drop is configurable.