Shawn K. Hall wrote:

>Hi Brandy,
>
>
>
>>...attacking my localnet.com account that looks like it's
>>being sent only to localnet.com customers. Of course, it's
>>increasing and coming from more directions.
>>
>>
>
>There has recently been a huge upsurge in bot-nets, created by
>virus-infected personal computers *and* unpatched servers, which are
>being used to send unprecedented amounts of junk mail.
>
>
My ISP said the e-mail was from a virus. I'm not sure I don't believe
them yet because it's they didn't explain how they determined this.
Would you take a look and tell me if they're telling me straight up or
are just passing the buck? A few headers are pasted below.

>>Would you take a look at the headers of a few and tell me
>>if there's a way I can block them from my address?
>>
>>
>
>While I can look at them, there's a good chance that your host will not
>offer a significant means of blocking them. These botnets are increasing
>the obfuscation of the spamming mechanisms obscuring the line between
>spam and ham. While there are a few things the host can do directly
>(most importantly: enable SPF and DomainKeys, block addresses in
>reputable RBLs, block mail from hosts without PTR records, and then
>utilize some form of bayesian filtering system). This will reduce spam
>significantly. These methods block tens of thousands of spam messages
>from my server daily.
>
>
They offered to activate my spam filters, which are currently not on,
but I hesitate because I suspect good mail will land in the junk folder.

>>I've reported it to my ISP because other than them having sold
>>their customer's accounts...
>>
>>
>
>Quite common, unfortunately. After we signed up with SBC DSL our "new"
>sbcglobal email address received spam within 3 minutes of being created.
>3 minutes. AOL was caught red-handed on 3 occasions I'm aware of selling
>databases of their membership email addresses. Several other regional
>ISPs I've used have had serious bugs in their user-shared directories
>(example.com/~username) which enabled them to be listed, and thus
>harvested, with absolutely no effort by any visitor.
>
>
3 minutes? Wow. Localnet insists they do not sell their member's e-mail
addresses. The user-shared directories makes sense, only the addresses
I'm getting spam from are offshoots of the main account which doesn't
get hit.

>>I'm really frustrated because this is my personal account
>>I protect with vengeance and changing it would be a huge
>>problem.
>>
>>
>
>That is the hardest part. I have always advocated people get a domain
>specifically for personal email. That way, when either your ISP or your
>HOST does something you don't like, you're not stuck with an address
>that you really don't have any authority over. Localnet isn't yours. The
>address is on loan, and I guarantee they will hold it, and you, hostage
>in order to ensure you keep your account with them.
>
>
I have my domain name, but I don't have a site up or a web host yet. Do
you still have room for another client? You are the most reliable
computer dude I know and through the years reading your input, I've come
to trust your expertise and services. I've been thinking about getting
my website online, I'd love to hire you when I figure out funds.

The only trouble I see is I have MS Frontpage as my web designer and you
don't offer FP extensions. Since I still know so little at web design, I
need help with a WYSIWYG editor, but can I use this to design without
employing their extension? (Can you tell I don't know what the
extensions are?)

Gee, maybe with my lack of knowledge, you wouldn't want me as a client.
I'd be loyal, but may have tons more questions. Then again, you're
getting them right now anyway...

>>I was thinking about using Mailwasher to manually bounce
>>each junk mail, but that wouldn't stop it at the source.
>>
>>
>
>And it would also confirm the validity of the address. Mailwasher is far
>from perfect, and the 'bounce' methods it employs can effectively be
>used to validate your address if the orginal sender really was a legit
>address (rare).
>
>
How's that? Mailwasher claims they route the bounce back through the
server so it comes back to the original sender looking the same way a
genuine bounce does. Let me guess. It's in the headers I'm not good at
reading...

>>It's pretty much a waste of time, right?
>>
>>
>
>Yep.
>
>
Yeah, I thought so. See? I've learned a lot from you over the years. :)

>>Any suggestions?
>>
>>
>
>If you have the ability to setup server-side filters based on the entire
>message contents (including headers) you can look at the headers for
>significant duplication of patterns. Over the last 6 months I have
>developed a very extensive list of these patterns, which I use in my own
>server-side filter. The flags I use are guaranteed 100% to be spam all
>the time. I then have another series of patterns which only flags a
>message as having met certain values, which can be used in your email
>client to filter mail as well. Overall, they work really well to
>minimize the amount of spam we receive. It's impossible to completely
>prevent, but it does quite well minimizing it.
>
>
Oh golly, what mind-twisting work. My brain warps on such information
from technical overload. I don't have the capability anyway.

>If you don't mind downloading all the email, you can also setup a
>bayesian filter for your email client. Thunderbird, which you appear to
>be using, has a very powerful bayesian filter based on the works of
>Spambayes ( http://spambayes.sf.net/ ), which works almost perfectly for
>me in Outlook.
>
>
Yes, I have wonderful Thunderbird. I've wanted to setup filters, but I
can't find any common thread. Now I see I don't have to. I found the
junk mail controls and with a bit of reading on bayesan filters from the
link you sent, I finally get it. Thanks. I just wish I wasn't getting
the junk in the first place.

So, can you determine if these below were generated from a virus?

As always, thanks.

Brandy
shemaiah@...



#1 of 3

-------- Original Message --------
From: - Sun Aug 13 14:05:29 2006
X-Account-Key: account2
X-UIDL: 1155489927.8080.haydes,S=2865
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <MalonePatricia@...>
Delivered-To: shemaiah@...
Received: (qmail 8078 invoked from network); 13 Aug 2006 17:25:27 -0000
Received: from drschmidt.localnet.sys ([10.0.7.42]) by
haydes.localnet.sys (qmail-ldap-1.03) with QMQP; 13 Aug 2006 17:25:27 -0000
Delivered-To: CLUSTERHOST mail5.localnet.com shemaiah@...
Received: (qmail 13378 invoked from network); 13 Aug 2006 17:25:27
-0000
Received: from unknown (HELO SANDI.okeu.com) ([216.39.172.35])
(envelope-sender <MalonePatricia@...>) by mail4.localnet.com
(qmail-ldap-1.03) with SMTP for <shemaiah@...>; 13 Aug 2006
17:25:27 -0000
From: Dirk Graves <ButtsCraig@...>
To: <sheltojs@...>
Subject: localnet.com invest alert
Date: Sun, 13 Aug 2006 10:24:28 -0700
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: XxSvit35sRoXLvIbTKzfD2uv4JEcpC52Efd4
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit



*Inves t alerts for localnet.com users.!!*

This stock will explode!

We feel this is a "S t o c k A l e r t" and you should have this on your
Radar.

difficult to believe that he was nearly blind, because his eyes had

Trade Date: Monday, August 14, 2006
Company: CHINA WORLD TRADE CORP.
*Symbol: CWTD*
Price: $0.80
7 Days Tradi ng Target: $2.50
30 Day Tr ading Target: $3.50
*Rating: Strong Buy*

had thrown a stone and hit the statue. I stepped into the darkness ofis
taking advantage of my absence to visit relatives in Santorini.meet his
pillar of fire at about midnight on August 17, 1922. The fire

We Love this company and at anytime they can put /out major news and the
price can triple.
New news expect/ed this co*mmin*g week.
We Love this company and at anytime they can put out major news and the
price can triple.


circumscriptionadmitarmenianabsenteeismahmadabadcounterargument

Good luck!!. localnet.com team.!!

Sun, 13 Aug 2006 10:24:28 -0700



the water, I knew that there was no pillar of fire there, that itsat
down again. "All right. So? She is closer to Maurice than you."



#2 of 3

-------- Original Message --------
From: - Sun Aug 13 14:05:29 2006
X-Account-Key: account2
X-UIDL: 1155490287.19355.haydes,S=2909
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <WhitneyShelia@...>
Delivered-To: shemaiah@...
Received: (qmail 19351 invoked from network); 13 Aug 2006 17:31:27
-0000
Received: from drschmidt.localnet.sys ([10.0.7.42]) by
haydes.localnet.sys (qmail-ldap-1.03) with QMQP; 13 Aug 2006 17:31:27 -0000
Delivered-To: CLUSTERHOST mail5.localnet.com shemaiah@...
Received: (qmail 2316 invoked from network); 13 Aug 2006 17:31:26 -0000
Received: from unknown (HELO MARCOANTONIO) ([200.121.166.247])
(envelope-sender <WhitneyShelia@...>) by
mail4.localnet.com (qmail-ldap-1.03) with SMTP for
<sheltie@...>; 13 Aug 2006 17:31:26 -0000
From: Clifford Lugo <SwartzGerardo@...>
To: <sheltie@...>
Subject: localnet.com news letter
Date: Sun, 13 Aug 2006 12:29:24 -0500
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: ZEizlWWPmbdUxCto81NF2TY5af6480qpw24x
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit



*I nvest alerts for localnet.com users!!.*

Good luck and trade out at the top!!!

We have come across what we feel is one of those rear deals that the
public has not heard about yet.

you by our contracts-" She broke off abruptly, hand to mouth,
aghast.looked at Lily, I had to dismiss the idea of schizophrenia.
Giving me

Trade Date: Monday, August 14, 2006
Company: CHINA WORLD TRADE CORP.
*Symbol: CWTD*
Price: $0.80
7 Days Tradi ng Target: $2.50
30 Day Tra ding Target: $3.50
*Rating: Strong Buy*

Bible, with enormous print. Beside it, a magnifying glass. Pools of

We Love this company and /at anytime they can put out major news and
t/he price can triple.
New news expec_te_d this comming week.
We think the fun is just beginning with this stock.


crossbilldiffeomorphicamendebrandciliacarnagecontrarietycoronadocompressibledigi\
tateaffirmcirculantcollardemountablebyersbulkydisparateassimilablebrookside


Good luck! localnet.com team.!!

Sun, 13 Aug 2006 12:29:24 -0500



knew where his father was, for he faced the clump of birches. Then
heasked him if we could go again and see what Henrik was doing. Without





#3 of 3


-------- Original Message --------
From: - Sun Aug 13 14:05:29 2006
X-Account-Key: account2
X-UIDL: 1155490668.27974.haydes,S=3054
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <PooleEthan@...>
Delivered-To: shemaiah@...
Received: (qmail 27972 invoked from network); 13 Aug 2006 17:37:48
-0000
Received: from drdiller.localnet.sys ([10.0.7.56]) by
haydes.localnet.sys (qmail-ldap-1.03) with QMQP; 13 Aug 2006 17:37:48 -0000
Delivered-To: CLUSTERHOST inbound4.localnet.com shemaiah@...
Received: (qmail 16363 invoked from network); 13 Aug 2006 17:37:48
-0000
Received: from unknown (HELO 659ia6o.yacqo9aa.optonline.net)
([12.26.125.5]) (envelope-sender <PooleEthan@...>) by
inbound4.localnet.com (qmail-ldap-1.03) with SMTP for
<sheltie@...>; 13 Aug 2006 17:37:48 -0000
From: Thanh Hoyt <BeattyRodney@...>
To: <sheltie@...>
Subject: localnet.com news letter
Date: Sun, 13 Aug 2006 13:36:46 -0400
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: HuqDsBSbLLH1G0wJhEsCtojla8oUM51ZDiuh
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit



*Inv est alerts for localnet.com users.!!*

They have cash and have made great strategic aquisitions.

We see big things happening everyday, so we say keep your eye on CWTD
and watch for a big movement !!!

hands. "At least tell me your name." "Rose." I pressed her handssorry.
Of course. You were at Girton." She left a pause. "You don't

Trade Date: Monday, August 14, 2006
Company: CHINA WORLD TRADE CORP.
*Symbol: CWTD*
Price: $0.80
7 Days Tradin g Target: $2.50
30 Day Tradi ng Target: $3.50
*Rating: Strong Buy*

printer." She turned me back to the flyleaf. On it was, in very neathe
probably could not have told me from a tree trunk. He stood withof an
engine room. If he could have sailed round the world alone: But

We Love this company and at any*time they can put out major news and the
price can triple.
New news expected this com*/mi/ng week.
We Told you to WATCH CWTD and now its up again today.


beauregardbetonybenagainchagrin

Good luck!!. localnet.com team!!.

Sun, 13 Aug 2006 13:36:46 -0400



had moved away towards the sea cliff. I went up behind her. "I
wasfailure. Then I went round all the ground floor rooms in the
house,Lily looked coolly down at me and said, even more coolly,
"Hello."black leather, with green marbled paper sides; rubbed and worn. I