No subject


Thu Jun 23 00:45:34 GMT 2005


ispmail.myfriend'sISP.net with Microsoft SMTPSVC;
	 Fri, 11 Jan 2002 05:39:30 -0500
Message-ID: <00003bf95d39$00000d9a$000059a2 at mail.Flashmail.com>
To: <usera at hotmail.com>
Cc: <userb at hotmail.com>,
 <userz at hotmail.com>,
 <usery at hotmail.com>,
 <userx at hotmail.com>
From: essa1189 at eudoramail.com
Subject: Herbal Viagra 30 day trial...                     RKOJYEIN
Date: Fri, 11 Jan 2002 03:21:46 -2000
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Reply-To: essa1189 at eudoramail.com
Return-Path: essa1189 at eudoramail.com



-----Original Message-----

From: list-admin at dshield.org [mailto:list-admin at dshield.org]On Behalf Of
Clint Byrum
Sent: Monday, January 14, 2002 2:54 PM
To: list at dshield.org
Subject: Re: [Dshield] Spammers


On Mon, 2002-01-14 at 11:11, Jeff Miller wrote:
> Greetings.
>
>
> My question is, does anyone know of a way to get messages to an SMTP
server,
> using anything other than SMTP?  In other words, how can spammers get
around
> the SMTP filter?

Absolutely. I've gotten quite a few pieces of spam from people using
open SOCKS/HTTP proxies to connect. The worst part is, they don't show
up on open relay lists, and they usually heavily forge the headers, so
its sometimes kind of hard to find the open proxy.

These proxies aren't just used by spammers.. they're also used by
scanners, IRC flooders, and people truly performing nefarious
activities. If you see scans for ports 1080, 8080, or 3128, you're
looking at somebody trying to find open proxies.

About all you can do is contact the owner of the proxy and tell them to
close it down. I've found that if its open, and unnoticed, its usually
some forgotten box in a hosting facility somewhere(found one that
'finger root at badbox' produced "last login Dec 01 1999" ... :-P

good luck.

>
> _______________________________________________
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/list


_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/list




More information about the list mailing list