procmail
[Top] [All Lists]

Re: restricted form

2003-01-31 10:29:51
On Fri, Jan 31, 2003 at 11:40:58AM -0500 or thereabouts, 
fleet(_at_)teachout(_dot_)org wrote:
On Fri, 31 Jan 2003 dman(_at_)nomotek(_dot_)com wrote:

FWIW, all these messages also have an X-Mailer: header.  That
must be what the raw software does, though the spammers mostly
customize^w munge the contents of the header to disguise what
of my good mail from the current batch has an X-Mailer: header.
 
The only software included in the X-Mailer: tags that I've ever been able
to tie specifically to the spamming industry is "Flicks Softwares" (which
I haven't seen in a while) and "eGroups Message Poster." I used to check
for "The Bat!" but found it used by too many "valid" posters.

The Bat! has a wonderful following and is a terrific mailer, unfortunately
for windows only at the present time.  Unfortunatley, a spam tool called
Advanced Mass Sender (AMS) by Max Terentiev will allow you to choose a
fake X-Mailer header to obfuscate. It is set up to use TB! as one of four
fake headers.  Info can be gleaned here if interested.

https://www.ritlabs.com/the_bat/spammer.html
 

-- 
Gary

statistics are like bikinis. What they reveal is suggestive, but what
they conceal is vital.

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>