Viewing Thread:
"Freeola SPAM filters"

Hello - at the end of November, Freeola updated their spam software and it made a massive improvement to the spam situation [URL]http://chat.freeola.com/Web-Development-4-chat/Super-spam-reduction-1119.html[/URL].

Since then I had hardly received any spam on my Freeola accounts from senders with made up names like: Wilma Burks, Belinda Fair, Houston Pickett - all with a subject like Hello!, photo, etc.

But in the last day or so I've noticed some of this type of spam starting to re-appear. Could Freeola please check their spam system is fully functional, as in the past I believe this has been an indication of something needing attention?

Thanks in advance.

Hi loki,

I forwared a porn E mail which arrived last night at my E mail freedom inbox !! to the abuse@freoola last night.

Should we just forward them to you, or as I have just noticed I can do, 'Show extended Headers', or in outlook express Right click - Message source which produces this additional info:

Message-Id: <200706171721.l5HHLqFL02 [email protected]>
Received: from mxes15.enta.net (mxes15.enta.net [62.249.192.198]) by pop.freeola.net (Postfix) with ESMTP id 2E10A295ED9 for ; Sun, 17 Jun 2007 18:21:53 +0100 (BST)from localhost (localhost.enta.net [127.0.0.1]) by mxes15.enta.net (Postfix) with ESMTP id 0765788925C for ; Sun, 17 Jun 2007 18:21:53 +0100 (BST) from mxes15.enta.net ([127.0.0.1]) by localhost (mxes15.enta.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02495-06 for ; Sun, 17 Jun 2007 18:21:52 +0100 (BST)from websmtp.freeola.net (websmtp.freeola.net [81.31.99.9]) by mxes15.enta.net (Postfix) with ESMTP id 6F2BE889255 for ; Sun, 17 Jun 2007 18:21:52 +0100 (BST)from freeolaweb1.freeola.net (freeolaweb1.freeola.com [81.31.99.11]) by websmtp.freeola.net (Postfix) with ESMTP id 37DB92CED57 for ; Sun, 17 Jun 2007 18:21:52 +0100 (BST)from freeolaweb1.freeola.net (localhost [127.0.0.1]) by freeolaweb1.freeola.net (8.13.8/8.13.8) with ESMTP id l5HHLqXi027578 for ; Sun, 17 Jun 2007 18:21:52 +0100 (BST) (envelope-from [email protected])
(from Unknown UID 1005300@localhost) by freeolaweb1.freeola.net (8.13.8/8.13.8/Submit) id l5HHLqFL027577; Sun, 17 Jun 2007 18:21:52 +0100 (BST) (envelope-from [email protected])

Reply-To: dating
Return-Path:
Subject: www.mysitecom Site Feedback Form
To: [email protected]
X-Authentication-Warning: freeolaweb1.freeola.net: Unknown UID 1005300 set sender to [email protected] using -f
X-Greylist: from auto-whitelisted by SQLgrey-
X-Mailer: chfeedback.php 2.07
X-Original-To: [email protected]
X-Virus-Scanned: amavisd-new at enta.net


Is this more helpful for Freeola to determine the origin of the spam or the E mail as it arrives with vast amounts of links to 'adult' sites.

Dan

EDIT: have just checked this Ip address of the sender: 62.249.192.198 at http://www.ripe.net/perl/whois. It returns:

% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag
% Information related to '62.249.192.128 - 62.249.192.255'
inetnum: 62.249.192.128 - 62.249.192.255
netname: ENTANET
descr: ENTANET International Ltd
descr: Stafford Park 6
descr: Telford Shropshire UK
descr: +44 1952 428888
remarks: INFRA-AW
country: GB
admin-c: SL1494-RIPE
tech-c: SL1494-RIPE
status: ASSIGNED PA
mnt-by: ENTANET-MNT
source: RIPE # Filtered
person: Steve Lalonde
address: Stafford Park 6
address: Telford
address: Shropshire
address: TF3 3AT
remarks: ##############################################
remarks: Abuse matters to: [email protected]
remarks: Abuse mail to any other address may be ignored
remarks: ##############################################
phone: +44 871 2236200
fax-no: +44 870 7709258
e-mail: [email protected]
nic-hdl: SL1494-RIPE
mnt-by: ENTANET-MNT
source: RIPE # Filtered
% Information related to '62.249.192.0/18AS8468'


Perhaps forward them the E mail back to deal ???

The Abuse address can be effective. It is used to identify the network from which the spam originates so that the offending accounts can be reported (and hopefully lead to the termination their services).

The problem is that spammers can easily switch ISPs/Hosts, but it can make life harder for them.

Coincidence or not, since raising this my spam has stopped!

So I'm very happy with Freeola's current spam filters :)

Does sending to that address work? ie does it do any good? we have sent many in the past but still get them back, at present I am toying with this email from a man in France that has to much money! and he wants to give his money to me so I can invest it for him! (bigger fool him) and we share the profits so he says.

Kev

I've sent some samples to [email protected]

Many thanks for letting us know. If you could forward them to us that would be very helpful. It may help if this ever becomes a problem.

Hello,
No it's just plain text.

I had about 2 yesterday, and 7 this morning - sent to a spread of domains. I'm happy to forward to your abuse address if that helps, but if you have a few Freeola accounts then you'll probably see some yourself.

It's not currently a problem, but thought I would let you know to try and nip it in the bud.

Graylisting is still active and running as it has always been. Unfortunately I think this may be a case of spammers getting wise to this filtering method. With spam you always have to try and keep one step ahead, so we will have to monitor this. What type of spam is it you are receiving? Is it image spam (messages are generated as images)?

Hello - at the end of November, Freeola updated their spam software and it made a massive improvement to the spam situation [URL]http://chat.freeola.com/Web-Development-4-chat/Super-spam-reduction-1119.html[/URL].

Since then I had hardly received any spam on my Freeola accounts from senders with made up names like: Wilma Burks, Belinda Fair, Houston Pickett - all with a subject like Hello!, photo, etc.

But in the last day or so I've noticed some of this type of spam starting to re-appear. Could Freeola please check their spam system is fully functional, as in the past I believe this has been an indication of something needing attention?

Thanks in advance.