Ridiculously annoying SPAM that just won't go away

Portal Home > Knowledgebase > Articles Database > Ridiculously annoying SPAM that just won't go away

Posted by Hostagon, 05-19-2015, 02:16 PM
Hi All, I appreciate any light you can shed on this spammer. Every Monday and Tuesday, of every week, for the past few months, I get absolutely barraged by what appears to be a single entity that sends the same type of spam. They always send spam based on various subjects and always send two to three copies or variations of said subject. They somehow slip right through MailScanner/Spam Assassin that I have configured on my cPanel servers. And they spam basically every email account on both of my servers. I have a screenshot of what the example spam emails look like): I have tried the following to limited/no success: 1. Moved spam to an IMAP folder i designated as die2u@mydomain.com where i just drag/drop these spam emails to this IMAP inbox 2. log on to my server on a weekly basis and run sa-learn --spam /home/myusername/mail/mydomain.com/die2u/cur 3. I also run sa-learn --sync 4. finally, rm -rf /home/myusername/mail/mydomain.com/die2u/cur/* I cronjob'd this for awhile but realized that some things were ending up in die2u accidentally or were legit so now i do this on a manual basis and this has become a huge pain. I just don't have time for this. I am using ConfigServer's custom MailScanner script for both of my cPanel servers - both are up-to-date as of today. What sucks is whenever I run the learn script, it works for only my one cpanel server. My other server has it even worse, where most of my customers are on (i'm a really small host). I have been getting more and more complaints about this specific type of spam lately, so I really would appreciate any help I can get. I will even pay for a seasoned professional to log on and check things out and maybe improve my mailscanner rulesets if possible.
Posted by my247webhosting, 05-19-2015, 02:56 PM
Enable filters based on SPF,DKIm,rdns,spamhaus,barracuda this should help you filter lot of these incoming spams
Posted by Hostagon, 05-19-2015, 03:15 PM
Isn't barracuda a paid filter? correct me if I'm wrong? I do have RBLs listed, rDNS lookups, SPF, DKIM, etc. But this one entity still gets through to me. I almost wonder if it's coming in internally.
Posted by Hostagon, 05-19-2015, 06:53 PM
I've started a 21 day trial over at spamexperts.com and I'm going to test this out to see how well it filters spam. I may go with their cloud hosted product if it's a good fit. I'm tired of managing spam and would rather leave it to the experts. Hopefully this is a good service. Comments welcome.