Hi, we are getting a huge amount of spam from tallish.net
I made a mail rule:
IF body CONTAINS tallish.net DON’T ACCEPT MESSAGE
but it is not stopping these messages because tallish.net appears in an HTML/MIME message inside an anchor.
For example:
I have not found a way to make a make rule that filters tallish.net inside the ‘a’ acnchor tag of an mime/html message.
Make rule works ok if tallish.net appears somewhere else in the body message.
Anybody knows how to do it?
Thanks a lot,
J R
Subject: tallish.net - huge amount of spam received
Why can’t you block the domain name using the Routere/SMTP, Restrictions and Controls, SMTP Inbound Controls, “Deny connections from the following SMTP internet hostnames/IP Addresses” field?
HTH.
Gregg
Subject: RE: tallish.net - huge amount of spam received
Hi Gregg, already blocking the IP of the connecting host but everyday we keep getting messages with different IPs (completely different).
The message does not come from tallish.net,
but it comes from different hostnames everytime.
All messages share an html body with an “a” (anchor link) to tallish.net
Any another idea,
J R
Subject: RE: tallish.net - huge amount of spam received
It seems that those busy spammers are moving around. You may want to look at using a Server based rule, or investigating a 3rd party spam filter (postini or something else). But, I don’t think that you will be able to create a rule that will find and reject a specific anchor link using the normal Domino stuff. There may be something you can use in the Sandbox.
Gregg
Subject: Thanks a lot