[Dshield] Pump and Dump Stock lists

Tony Nichols tony at mail.applog.com
Tue Jan 30 13:13:10 GMT 2007


On Mon, 2007-01-29 at 22:25 -0600, Shaun wrote:
> On Mon, 29 Jan 2007 18:05:34 -0500
> "Boy, Gary" <gboy at installed.net> wrote:
> 
> > This little gem caught about 300 of the nasty little buggers in about
> > eight hours.  Thank you very much.
> 
> Tell your friends and fellow mail admins that "6c822ecf" is the key to
> filtering much of this bullshit out... Glad it helped. It's been well
> publicized, yet the Russians behind this whole thing ain't bothered to
> change it. I still believe that's intentional on their part.
> 
> <http://www.shaunc.com/static/6c822ecf_383.html>
> 
> Yours in Polonium-210-ness,
> 
> -s
Anyone have a script I might use at my mail server (postfix 2.2.5 and
procmail)? I don't know if it should be a regex or maybe adjust the
existing header check....

Thanks,

t o n y




More information about the list mailing list