[Dshield] Pump and Dump Stock lists

Jay Moore jmoore at mooretec.net
Tue Jan 30 19:23:26 GMT 2007


Tony Nichols wrote:

>On Mon, 2007-01-29 at 22:25 -0600, Shaun wrote:
>  
>
>>On Mon, 29 Jan 2007 18:05:34 -0500
>>"Boy, Gary" <gboy at installed.net> wrote:
>>
>>    
>>
>>>This little gem caught about 300 of the nasty little buggers in about
>>>eight hours.  Thank you very much.
>>>      
>>>
>>Tell your friends and fellow mail admins that "6c822ecf" is the key to
>>filtering much of this bullshit out... Glad it helped. It's been well
>>publicized, yet the Russians behind this whole thing ain't bothered to
>>change it. I still believe that's intentional on their part.
>>
>><http://www.shaunc.com/static/6c822ecf_383.html>
>>
>>Yours in Polonium-210-ness,
>>
>>-s
>>    
>>
>Anyone have a script I might use at my mail server (postfix 2.2.5 and
>procmail)? I don't know if it should be a regex or maybe adjust the
>existing header check....
>
>Thanks,
>
>t o n y
>
>
>  
>

What about a SPAMASSASIN rule?


-- 
Jay Moore


<http://www.mooretec.net>


More information about the list mailing list