Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 3169 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

One Line URL P0rn Spam

rrosson
Running 9.203-3 with the following RBL's enabled:

  • drone.abuse.ch
  • bl.spamcop.net
  • zen.spamhaus.org
  • b.barracudacentral.org
  • dul.dnsbl.sorbs.net

I recently rescued mail (failed server) services for my parents and their domains and it appears that my step-fathers email address is on some SPAM list that sends one line URL p0rn links. Analysis of over a 100 messages of this type over a couple of days show no common denominator to filter on. (i.e. The reason for the additional RBL's). Sources, ( i.e. Counties. IP's, etc ) are all over the place. the only thing that is common is that the e-mail is one line containing a URI and the subject contains a p0rnographic description.

Any ideas on how to block this at the UTM?

TIA


This thread was automatically locked due to age.
Parents
  • 0
    ctasd reports 'Unknown'

    Ron, I think that means there's not much to do other than send the offending emails to Commtouch (now Cyren).  It used to be possible to do that with:
    Reporting e-mail that is spam to Commtouch:
    1.Obtain the message as it was originally received.
    2.Send the message as an attachment to reportfn@blockspam.biz with the following subject line: 
    [FN Report][Astaro][Date]

    Note: Only the Date tag should be modified. Example: [FN Report][Astaro][mm/dd/yyyy] 

    I'd be interested to know if that still works.  If not, then the address for the "classic" Sophos anti-spam is is-spam@labs.sophos.com.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    ctasd reports 'Unknown'

    Ron, I think that means there's not much to do other than send the offending emails to Commtouch (now Cyren).  It used to be possible to do that with:
    Reporting e-mail that is spam to Commtouch:
    1.Obtain the message as it was originally received.
    2.Send the message as an attachment to reportfn@blockspam.biz with the following subject line: 
    [FN Report][Astaro][Date]

    Note: Only the Date tag should be modified. Example: [FN Report][Astaro][mm/dd/yyyy] 

    I'd be interested to know if that still works.  If not, then the address for the "classic" Sophos anti-spam is is-spam@labs.sophos.com.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML