PN's SPAM filters missing SPAM

My own filters are set up to delete posts labelled SPAM. Up to the compromise this was very effective.

I am now getting several emails into my "inbox" that are SPAM but have not been marked as such and they are all from my PN emails.

Their filters do not seem very effective.

Hi,

Could you PM me one example... with full headers/body?

Cheers,

Steve
http://sanesecurity.blogspot.com/

If any get through send them to the relevant address so the system can be helped to learn from it's mistakes

- Email that has been *incorrectly* marked as SPAM should be forwarded to [email protected]

- Any SPAM email you have received that has not been marked as such should be forwarded to [email protected]

Mine all got sorted this morning by Mand, she did advise that the way my maiboxes were now configed on the server/portal i would only get emails sent to me, or mailboxes that i have set up, but i'm now getting spam email that are not to me directly but into my account that was rectifed this morning, i thought it was a case of once the catch all is enabled/disabled as you specify, then only mail destined for legit mailboxes would get through, that said, i'm going to sit tight and wait for the Thursday annoucment

They do come in waves, so sometimes in a day nothing gets through. Have deleted the ones which promted this message but will Pm as soon as the next batch arrives!

That is the case. Removing the catch all, or not directing it to a new mailbox, will stop mail not addressed explicitly to a valid mailbox from appearing.

Unfortunately the main problem with spam currently is due to the leak of valid email addresses. So the only way to stop receiving them is to totally stop receiving or redirecting mail sent to those addresses. Which unfortunately includes valid email. The best way to work around this is to setup a new mailbox, forward all mail to this mailbox, and tell people you are in contact with to use the new address. After a period of time when most people you deal with have got used to your new address, you can turn off the redirect and hence stop receiving the spam addressed to the old mailbox.

If you're still receiving mail not explicitly addressed to you or one of your addresses, there may be some catch alls or redirects still lurking somewhere.

I seem to be getting more spam (from the "none ever" to the "a couple a day" after the email address "theft" recently) since PlusNet introduced this new spam labeling system - and none of them are being marked spam and are just going straight in to my inbox...

I can only presume the '$89.95 Adobe Creative Suite 3' emails that I keep receiving to my inbox, are not spam and are actually totally legitimate...?

Looks like my work email address was compromised too :-(

The funny thing is, it's never been any where near the Webmail AtMail server..

From Subject Date
Heather Hamm (rrichaquetas@r.. Take one capsule twice daily. If you... 5/23/07 9:02 AM
Margarita Burger (bhimaginan.. This is an experience like no other! 5/23/07 10:43 AM
Wilson Lowery (imiovercap@do.. Photoshop CS3 $89 5/23/07 1:46 PM

In reply to:

---

Looks like my work email address was compromised too

---

Not necessarily... it just means your receiveing the same bulk spam that we're all getting.

Here's our non-plusnet work stats:

Mar 28: 1,028 ................
Mar 29: 1,295 ....................
Mar 30: 1,943 ...............................
Apr 02: 1,599 .........................
Apr 03: 1,550 .........................
Apr 04: 1,556 .........................
Apr 05: 717 ...........
Apr 06: 524 ........
Apr 07: 127 ..
Apr 08: 660 ..........
Apr 09: 415 ......
Apr 10: 452 .......
Apr 11: 370 .....
Apr 12: 383 ......
Apr 13: 381 ......
Apr 14: 140 ..
Apr 15: 331 .....
Apr 16: 208 ...
Apr 17: 762 ............
Apr 18: 1,384 ......................
Apr 19: 1,294 ....................
Apr 20: 363 .....
Apr 21: 61
Apr 23: 1,877 ..............................
Apr 24: 517 ........
Apr 25: 276 ....
Apr 26: 712 ...........
Apr 27: 650 ..........
Apr 28: 955 ...............
Apr 29: 853 .............
Apr 30: 1,069 .................
May 01: 721 ...........
May 02: 794 ............
May 03: 523 ........
May 04: 497 ........
May 05: 587 .........
May 06: 469 .......
May 07: 494 .......
May 08: 664 ..........
May 09: 1,074 .................
May 10: 1,464 .......................
May 11: 653 ..........
May 12: 517 ........
May 13: 670 ..........
May 14: 1,244 ....................
May 15: 2,445 .......................................
May 16: 929 ..............
May 17: 558 .........
May 18: 1,491 ........................
May 19: 2,062 .................................
May 20: 1,589 .........................
May 21: 2,831 .............................................
May 22: 1,801 .............................
May 23: 3,115 ..................................................
May 24: 3,025 ................................................

This month has seen a bit of an increase... and it's not all PlusNet's fault

True, it's not all PlusNet's fault

But it has been surprising how many paths there have been for email addresses to end up on the various databases compromised.