Spam

HM24 · 25 Jun 2013, 10:05 AM

I am receiving regular spam emails from various "stockbroking" people.
It is all spam and unsolicited and from various sources.

Anyone else having this issue or will I need to "retrain" my filter ?

Cheers. Jack

dodorkahedron · 29 Jun 2013, 04:03 AM

(Longtime reader, first time poster)

Yes, I have received in my inbox 3 or 4 fake shipping notices purporting to be from FedEx just this week. It's the most I've ever seen get through.

*edited to add:

And once again, the pendulum swings the other way. Several of my whitelisted contacts' emails are inexplicably being sent to spam. I have an Enhanced account set to Normal, because even after all these years (and close to 50K of ham emails logged), it claims there have been only 50 spam entries, which I know is false. Irritating.

gardenweed · 29 Jun 2013, 08:07 AM

Quote:

Originally Posted by HM24

I am receiving regular spam emails from various "stockbroking" people.
It is all spam and unsolicited and from various sources.

Anyone else having this issue or will I need to "retrain" my filter ?

Cheers. Jack

I'm getting 3-4 stock pick spam emails each day for the last 6-7 days.
But they are all being filtered correctly into my Spam folder.
So maybe some re-training is required as you suggest.

ed_welch · 3 Jul 2013, 09:00 AM

I'm seeing the same thing. Fastmail used to be more or less spam free, but for the last month or so, I'm getting an incessant stream of spam - 2 or 3 each day.
There used to be a great adminstrator here that was always able to figure out where the spam was coming from and then block it off at source. I donnow maybe he's on holiday or something?

Terry · 4 Jul 2013, 04:32 PM

I have been getting those now to my main fastmail email address which I don;t use and have never given out....but use it to log in to my account.

I wish Rob would fix it up, I'm trying to block them with sieve, but they are from different ip's most of the time.

DrStrabismus · 4 Jul 2013, 08:58 PM

Quote:

Originally Posted by Terry

I have been getting those now to my main fastmail email address which I don;t use and have never given out....but use it to log in to my account.

I wish Rob would fix it up, I'm trying to block them with sieve, but they are from different ip's most of the time.

If they are getting through SpamAssassin try filtering on the company. Most of them are for a company called Biostem which uses the identifier HAIR. The latter is usually obfuscated with spaces and underscores e.g. H_A_I R.

Terry · 5 Jul 2013, 02:41 PM

Thank you I will try that....

n5bb · 6 Jul 2013, 10:17 AM

Be sure you have your personal Bayes filtering activated (at the bottom of the Spam/Virus Protection screen) and try to whitelist your important email contacts in your address book. Then go to custom filtering and lower the threshold for moving messages to the Junk Mail folder. After using Bayes filtering for a while, 99% of the 188 spam messages received at my main Fastmail account in the past 30 days have a spam score of at least 2, and I don't think I received any false positives in Junk Mail with a score greater than 2.

The spammers are changing their domains and message content dynamically to attempt to evade SpamAssassin and other filtering. I find that the user Bayes filter really helps to keep the spam receiving high scores. At this time I file into the Junk Mail when the spam score is >1 and delete when the score is >12. I receive on an average 6 spam messages a day in Junk Mail, and only a couple a month make it into my Inbox (usually from compromised accounts or forwarded from another email service). If I remove the deletion rule my spam count in Junk Mail goes way up, making it take more effort to check for false positives.

I'm going to try changing my Junk filing and deletion thresholds to 2 and 8. This should reduce the spam count in my Junk Mail folder to about 3 per day average, while reducing the possibility of false positives.

I have my own domain which has public websites and I forward some other email service messages to my Fastmail account. The messages forwarded from other non-Fastmail services and the random spam to my domain produces the majority of my spam.

Bill

Terry · 8 Jul 2013, 07:17 AM

It's Russian spam I can block that country but I will see how it goes over the next few days.

Bamb0 · 9 Jul 2013, 10:33 PM

Quote:

Originally Posted by HM24

Anyone else having this issue or will I need to "retrain" my filter ?

Yes im getting that crap also!!!!! (For about a week now)

NO WAY TO BLOCK IT ... THEY KEEP CHANGING THE FROM AND SUBJECT!!! -- Stupid idiots!!

Quote:

Originally Posted by gardenweed

I'm getting 3-4 stock pick spam emails each day for the last 6-7 days.
But they are all being filtered correctly into my Spam folder.
So maybe some re-training is required as you suggest.

How do you have yer filter configured please??

gardenweed · 9 Jul 2013, 11:05 PM

Quote:

Originally Posted by Bamb0

...

How do you have yer filter configured please??

The stock spam emails all seem to have spam scores > 20 so are simply filtered out.
My filter is set to send anything with a score >5 to the Spam folder.

However I am starting to get these stupid scam emails whereby they "wish to bring to your
notice a request that would be of immense benefit to the both of us".

These are getting tagged with a spam score of <2.
So these are getting into my Inbox

Terry · 10 Jul 2013, 07:51 AM

If you use sieve try this......but you may have to take out a few countries

## PreReject {{{

if header :contains ["from", "received"]
[".at ",".at>",".AT","jp ", ".kr ", ".pt ",".pl", ".ru ",".cz ",
".ru>",".jp>", ".kr>", ".pt>", ".pl>",".cz>"] { fileinto "INBOX.Junk Mail";stop;}

### }}}

DrStrabismus · 11 Jul 2013, 12:03 AM

Quote:

Originally Posted by Terry

If you use sieve try this......but you may have to take out a few countries

## PreReject {{{

if header :contains ["from", "received"]
[".at ",".at>",".AT","jp ", ".kr ", ".pt ",".pl", ".ru ",".cz ",
".ru>",".jp>", ".kr>", ".pt>", ".pl>",".cz>"] { discard; stop;}

### }}}

Header tests are by default case-insensitive (I'm not sure whether fastmail supports a case-sensitive comparator), so ".AT" is quite dangerous; as is the missing space in ".pl".

Personally I wouldn't discard on something like this because it makes it hard to spot problems. Filing into a folder that auto-deletes is a reasonable compromise.

Terry · 12 Jul 2013, 06:48 PM

Thanks Dr for the pointers....I have now put {fileinto "INBOX.Junk Mail";stop;}

HM24 · 16 Jul 2013, 10:56 AM

I have adjusted my fastmail spam settings to "Aggressive" and this seems to have taken care of the flood of stockbroking spams.

However, last week I received an email supposedly from "myself".
The spammer had used one of my existing Fastmail aliases and rejigged the alias by adding a single hyphen.
The spam email contained a virus payload, disguised as a Jpeg called "Georgia" and was about 48kb in size.

Just thought I would give other Fastmail users a heads up, as this was a targeted virus attack and the *******s may try to re engineer other fastmail addresses/users to launch similiar targeted attacks.

25 Jun 2013, 10:05 AM	#1
HM24 Junior Member Join Date: Jun 2011 Posts: 20	Spam I am receiving regular spam emails from various "stockbroking" people. It is all spam and unsolicited and from various sources. Anyone else having this issue or will I need to "retrain" my filter ? Cheers. Jack

29 Jun 2013, 04:03 AM	#2
dodorkahedron Junior Member Join Date: Jun 2013 Posts: 25	(Longtime reader, first time poster) Yes, I have received in my inbox 3 or 4 fake shipping notices purporting to be from FedEx just this week. It's the most I've ever seen get through. edited to add: And once again, the pendulum swings the other way. Several of my whitelisted contacts' emails are inexplicably being sent to spam. I have an Enhanced account set to Normal, because even after all these years (and close to 50K of ham emails logged), it claims there have been only 50 spam entries, which I know is false. Irritating. Last edited by dodorkahedron : 3 Jul 2013 at 09:24 PM. Reason: added add'l info*

10 Jul 2013, 07:51 AM	#12
Terry The "e" in e-mail Join Date: Jul 2002 Location: VK4 Posts: 3,029	If you use sieve try this......but you may have to take out a few countries ## PreReject {{{ if header :contains ["from", "received"] [".at ",".at>",".AT","jp ", ".kr ", ".pt ",".pl", ".ru ",".cz ", ".ru>",".jp>", ".kr>", ".pt>", ".pl>",".cz>"] { fileinto "INBOX.Junk Mail";stop;} ### }}} Last edited by Terry : 12 Jul 2013 at 06:52 PM.

16 Jul 2013, 10:56 AM	#15
HM24 Junior Member Join Date: Jun 2011 Posts: 20	Virus/Spam I have adjusted my fastmail spam settings to "Aggressive" and this seems to have taken care of the flood of stockbroking spams. However, last week I received an email supposedly from "myself". The spammer had used one of my existing Fastmail aliases and rejigged the alias by adding a single hyphen. The spam email contained a virus payload, disguised as a Jpeg called "Georgia" and was about 48kb in size. Just thought I would give other Fastmail users a heads up, as this was a targeted virus attack and the *******s may try to re engineer other fastmail addresses/users to launch similiar targeted attacks.

3 Jul 2013, 09:00 AM	#4
ed_welch Junior Member Join Date: Apr 2005 Posts: 12	I'm seeing the same thing. Fastmail used to be more or less spam free, but for the last month or so, I'm getting an incessant stream of spam - 2 or 3 each day. There used to be a great adminstrator here that was always able to figure out where the spam was coming from and then block it off at source. I donnow maybe he's on holiday or something?

4 Jul 2013, 04:32 PM	#5
Terry The "e" in e-mail Join Date: Jul 2002 Location: VK4 Posts: 3,029	I have been getting those now to my main fastmail email address which I don;t use and have never given out....but use it to log in to my account. I wish Rob would fix it up, I'm trying to block them with sieve, but they are from different ip's most of the time.

5 Jul 2013, 02:41 PM	#7
Terry The "e" in e-mail Join Date: Jul 2002 Location: VK4 Posts: 3,029	Thank you I will try that....

6 Jul 2013, 10:17 AM	#8
n5bb Intergalactic Postmaster Join Date: May 2004 Location: Irving, Texas Posts: 8,929	Be sure you have your personal Bayes filtering activated (at the bottom of the Spam/Virus Protection screen) and try to whitelist your important email contacts in your address book. Then go to custom filtering and lower the threshold for moving messages to the Junk Mail folder. After using Bayes filtering for a while, 99% of the 188 spam messages received at my main Fastmail account in the past 30 days have a spam score of at least 2, and I don't think I received any false positives in Junk Mail with a score greater than 2. The spammers are changing their domains and message content dynamically to attempt to evade SpamAssassin and other filtering. I find that the user Bayes filter really helps to keep the spam receiving high scores. At this time I file into the Junk Mail when the spam score is >1 and delete when the score is >12. I receive on an average 6 spam messages a day in Junk Mail, and only a couple a month make it into my Inbox (usually from compromised accounts or forwarded from another email service). If I remove the deletion rule my spam count in Junk Mail goes way up, making it take more effort to check for false positives. I'm going to try changing my Junk filing and deletion thresholds to 2 and 8. This should reduce the spam count in my Junk Mail folder to about 3 per day average, while reducing the possibility of false positives. I have my own domain which has public websites and I forward some other email service messages to my Fastmail account. The messages forwarded from other non-Fastmail services and the random spam to my domain produces the majority of my spam. Bill

8 Jul 2013, 07:17 AM	#9
Terry The "e" in e-mail Join Date: Jul 2002 Location: VK4 Posts: 3,029	It's Russian spam I can block that country but I will see how it goes over the next few days.

12 Jul 2013, 06:48 PM	#14
Terry The "e" in e-mail Join Date: Jul 2002 Location: VK4 Posts: 3,029	Thanks Dr for the pointers....I have now put {fileinto "INBOX.Junk Mail";stop;}