Message-ID: <50D7547C.8060102@gmail.com>
Date: 2012-12-23T18:59:08Z
From: Duncan Murdoch
Subject: Spammer radhi
In-Reply-To: <50D75173.8030405@sapo.pt>
On 23/12/2012 1:46 PM, Rui Barradas wrote:
> This happened two or three weeks ago and it's happening again.
> Spammers are using Nabble to attack R-Help. The psts are signed radhi
> and the posts' titles are taken from previous posts and therefore seem
> authentic but all messages end with "click here". I suggest you don't.
> And don't rply to this "radhi"
A simple solution to the Nabble problem is to filter on the "Message-ID"
and "References" header. If either of them contains the string
"nabble.com", then the message was either posted from Nabble or is a
reply to a message that was posted from Nabble. Delete both types, and
Nabble ceases to be a problem.
Duncan Murdoch