Full Disclosure mailing list archives

Re: Empty emails?


From: gabriel rosenkoetter <gr () eclipsed net>
Date: Wed, 25 Feb 2004 15:16:33 -0500

On Wed, Feb 25, 2004 at 06:36:03AM -0700, James Lay wrote:
Anyone else seeing a lot of these?
[...]
That's it....no subject....no nuffin...been seeing a boatload lately.

These are frequently an attempt to exploit SpamAssassin's autolearn
feature. (Send a bunch of these through with nothing that SA's rules
can match, autolearn will generate a default decrement for that
sender address, then they hammer spam through for a bit. Rinse,
repeat.)

-- 
gabriel rosenkoetter
gr () eclipsed net

Attachment: _bin
Description:


Current thread: