How would you handle a flood of spam with headers like this?
Question asked by Eric Bourland - 11/26/2015 at 1:05 PM
Hi friends, and happy holiday. I'm getting about a million of these. I use Spam Assassin in a Box, and I use the latest Bruce Barnes anti-spam settings. I'd like to track these people down and .... errr .... give them a good talking to. How would you block this particular, persistent spammer? Thank you for your advice. Eric
Return-Path: <staff@hotmail.com>
Received: from BAY004-OMC4S6.hotmail.com (bay004-omc4s6.hotmail.com []) by tarsier.viviotech.net with SMTP;
   Thu, 26 Nov 2015 14:45:34 -0500
Received: from BAY0-XMR-016.phx.gbl ([]) by BAY004-OMC4S6.hotmail.com with Microsoft SMTPSVC(7.5.7601.23008);
	 Thu, 26 Nov 2015 11:45:53 -0800
Received: from mail pickup service by BAY0-XMR-016.phx.gbl with Microsoft SMTPSVC;
	 Thu, 26 Nov 2015 11:45:53 -0800
Date: Thu, 26 Nov 2015 11:45:53 -0800
From: staff@hotmail.com
Subject: Someone lewd out there 541-859-3523 is willing to date with you today! See my dirty pics
To: postmaster@tarsier.viviotech.net
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="307EE1E7-15EB-42C1-B02D-3BDFA3CC1BB7"
Message-ID: <BAY0-XMR-016zVzEUPi007a9bd5@BAY0-XMR-016.phx.gbl>
X-OriginalArrivalTime: 26 Nov 2015 19:45:53.0564 (UTC) FILETIME=[0F757DC0:01D12883]
Return-Path: staff@hotmail.com
X-SmarterMail-Spam: SPF_None, ISpamAssassin 1 [raw: 1], SpamAssassin 0 [raw: 0], DK_None, DKIM_None
X-SmarterMail-SpamDetail: 0.5 FRT_TODAY2 ReplaceTags: Today (2)
X-SmarterMail-SpamDetail: 0.7 S25R_1 S25R: Bottom of rDNS has num, non-num, num
X-SmarterMail-SpamDetail: Content analysis details:   (0.0 points, 5.0 required)
X-SmarterMail-SpamDetail: pts rule name              description
X-SmarterMail-SpamDetail: ---- ---------------------- --------------------------------------------------
X-SmarterMail-SpamDetail: 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
X-SmarterMail-SpamDetail: (staff[at]hotmail.com)
X-SmarterMail-SpamDetail: 0.0 HTML_MESSAGE           BODY: HTML included in message
X-SmarterMail-TotalSpamWeight: 1

3 Replies

Reply to Thread
Eric Bourland Replied

SmarterMail 14.4 (latest)
All of these messages -- and I have been getting them for months -- come from staff@hotmail.com.
Lucidio Arruda Neto Replied
All from same sender?
>Security>SMTP Blocking>New
>block type Email Address staff@hotmail.com
should do the job.
Eric Bourland Replied
I'll give that a shot. Thank you for that.

I wonder if there are adjustments I can make in SAIB or my other spam blocking measures.

I really appreciate the help. =)


Reply to Thread