do you think its a good idea to block *.biz and *.info domains? I can't think of any legit communications we would need to do with any domains with .biz or .info extensions

11/7/2007 12:18:24 PM

i work on a totally legit, government-related (though not government owned...YET) .info site

wasn't my choice of domain extension, though

11/7/2007 12:20:42 PM

the vast majority of domains we regularly exchange emails with are .com domains with the occasional .net

i guess it might be a judgement call on a company to company basis...but one of my users is getting all these spam emails with the same format, but always appearing to be from a different sender with a different subject, but you can tell its the same people doing it...for example

Quote :

" -----Original Message----- From: Kyle [mailto:old@infosupersky.com] Sent: Tue 11/6/2007 12:44 PM To: (user at my work) Cc: Subject: Earn while you Learn.Step by Step Proven System from Google. http://ptd.infosupersky.com/koyebzbfcqe/bc/ http://lt.infosupersky.com/qbjyekcbscqh/bo/ "

i dont want to "opt out" with any of those links because i don't trust them, but i'm just trying to figure out how to reduce spam even though its pretty minimal...we use Symantec Brightmail for Exchange, btw

11/7/2007 12:25:28 PM

can you filter out messages that contain "infosupersky" in the body?

[Edited on November 7, 2007 at 2:36 PM. Reason : ]

11/7/2007 2:36:05 PM

yeah but the problem is, the next email will have the same type formatting and links, but it will be from a different domain other than "infosupersky"...every time the user forwards me one of these emails i block the domain, whether or not it was actually sent from the domain or there was a fake sender...and i also block certain words in the title like "Viagra" and "Nigerian"...but per that particular mail I don't want to block a word like "Google" which could easily be in a legit email

I'd recommend Brightmail for anyone who wants an intuitive-to-use anti spam and anti virus filter for Exchange Servers...but in this case I need to somehow find out the root sender...apparently the SBL/XBL/CBL lists that Brightmail updates every day still allow this sender(s) to get through

11/7/2007 3:57:07 PM

you should go ahead and block all of africa and all of china

11/7/2007 7:08:38 PM

we actually have some business associates in Taiwan and Hong Kong but I probably should do some type of country blocking

11/7/2007 7:15:08 PM

spamato

11/9/2007 2:22:32 AM