Problem blocking SPAM

[Carlos Camacho]

Hi all,

I have a problem with a certain spammer which support wasn't able to help me on. In my email client, when I get this spam, it doesn't contain any body text, subject or sender. I realize I could set up a spam filter in the client, but it would be better to kill them at the server level.

In Plesk > Server > SpamAssasin, I've entered the following in the blacklist:

*btbroadband.com
*btcentralplus.com
*@cashette.com
*incamail.com
*@86.131.23.34

However, the spam still is getting through. I've set my "Hits required for spam" for the server to 6. Spam messages are set to be deleted rather than marked as Spam as well. Is anyone else getting this Spam, or more importantly, any way to stop this Spam?

One thing I shoudl point out. The site mydomain1.com is where the Spam is being sent. The site mydomain2.com is one of my other sites. (mydomain1's Reverse DNS is set to mydomain2.com)

Here is the message source:

From - Thu Jul 28 08:54:44 2005
X-Account-Key: account3
X-UIDL: UID423-1121839158
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <MitchMims@cashette.com>
Delivered-To: 2-editor@mydomain1.com
Received: (qmail 4924 invoked from network); 23 Jul 2005 07:15:19 -0400
Received: from host86-131-23-34.range86-131.btcentralplus.com (uzwkgvweqo@86.131.23.34)
by mydomain2.com with SMTP; 23 Jul 2005 07:15:19 -0400
Received: from incamail.com (8.71.108.248) by nz402-rqm8.incamail.com with Microsoft SMTPSVC(9.9.3981.5012);
Sat, 23 Jul 2005 18:15:25 +0600
Received: from incamail.com (incamail.com 216.0.22.248)
by incamail.com (8.12.10/8.12.9) with ESMTP id b[1


Regards,

[charles]

I'd create a local SA rule to block emails with empty bodies. Something like

body CARLOS_EMPTY_BODY /^$/
score CARLOS_EMPTY_BODY 10
describe CARLOS_EMPTY_BODY Rule to block messages with no body


See http://wiki.apache.org/spamassassin/WritingRules for details.

charles

[Carlos Camacho]

I'll give that a go. Thanks.