[Cialug] New SPAM source!

[Ken R]

Yes, yes I have. Sean and I have discussed it quite a bit on Slack, too.

For now, I've only been able to add firewall block rules once a couple of messages get through to stop more from making it. Most of these also have valid DKIM setups.

Thanks!
Ken R

----- Original Message -----
From: "L. V. Lammert" <lvl at omnitec.net>
To: "Central Iowa Linux Users Group" <cialug at cialug.org>
Sent: Tuesday, February 4, 2020 10:34:20 AM
Subject: [Cialug] New SPAM source!

Has anyone noticed the new SPAM process - create a trivial domain name
(e.g. enclavetcc.com, firgrovemotel.com, chaddsfordchiropractor,
beautyswapper, and many others), setup valid reverse DNS, and, Viola' - a
way to send SPAM and get through to a lot of recipients!

Don't really understand the goal, however, as the test of the email does
not *appear* malicioius, and the SA score is normal. Often the embedded
links appear to be valid (e.g. cancer.gov)!

Any thoughts on identifying and blocking?
_______________________________________________
Cialug mailing list
Cialug at cialug.org
https://www.cialug.org/cgi-bin/mailman/listinfo/cialug