Page 1 of 1

Emails with inline Images not being blocked

Posted: Sat Aug 29, 2009 1:20 am
by wartangler
Magicspam seems to be working but bulk emails with in-line images keep getting through. Basically the email is an image promoting items, yet underneath the code reveals ramblings of a possible spyware infected PC.

to date i've tried locking down all the filters to no avail, this only managed to stop good mail getting through

anyone help?

Re: Emails with inline Images not being blocked

Posted: Mon Aug 31, 2009 2:55 pm
by magicspam
We can most certainly sympathize with this type of spam. One of the more common patterns that we have been seeing as a trend is that more and more spam is being leaked via 'freemail' providers, and as such causes an increased difficulty in blocking mail - particularly at the SMTP level.

This being said, if you happen to have some examples of the spam in question with the original headers intact, our spam auditing department would be interested in reviewing to determine if this is a case of new compromised networks that should be blocked or if there are any other methods or rules that can be adjusted to block.

Out of curiosity, are you also utilizing a mail body filter (ie: SpamAssassin) in conjunction with MagicSpam?

Re: Emails with inline Images not being blocked

Posted: Fri Sep 04, 2009 1:43 am
by wartangler
Hi
the problem i have had all along is actually getting spamassassin to work with plesk and mailenable successfully, hence buying MagicSpam to add a certain level of spam filtering. so in answer to your question is No i haven't been using spamassassin as well.

do you have an address i can forward the emails to re the in-line images?

Re: Emails with inline Images not being blocked

Posted: Fri Sep 04, 2009 8:42 am
by wizard
If you have uncaught spam that can be forwarded with full headers intact, then feel free to sent them along to spamauditor@linuxmagic.com. From there our spam analysis team can determine if there are improvements, patterns, or new spam IP space that can be added to our internally maintained lists.