Spam bomb - looking for help/advice


#1

Hello -

I’m having a bit of a problem with some joker spam bombing me from ~171 addresses/domains. I started adding filters, but realized that they may eat up a ton of resources, so I’m not sure what to do. (and it would take a long time to add all 171)

Anything incoming from these need to go to dev/null but i’m not sure how to get them there without filters. I can’t catch any wrongly flagged real emails in the spam filter because of these. Is there a more efficient way to delete these before they get checked for spam?

Here’s the list:

noreply@affordial.org
noreply@aground.org
noreply@airdord.org
noreply@anaderson.org
noreply@anipar.org
noreply@annimail.org
noreply@annony.org
noreply@appleore.org
noreply@assumpter.org
noreply@asylimb.org
noreply@barrowstar.org
noreply@baseresort.org
noreply@billsup.org
noreply@bornout.org
noreply@brightson.org
noreply@brinybreeze.org
noreply@bromod.org
noreply@bugare.org
noreply@bunsun.org
noreply@bursh.org
noreply@buwner.org
noreply@calams.org
noreply@cardiin.org
noreply@clickor.org
noreply@conjurate.org
noreply@couponville.org
noreply@credimail.org
noreply@derenk.org
noreply@dishvall.org
noreply@docead.org
noreply@dormall.org
noreply@doubton.org
noreply@durogs.org
noreply@electonic.org
noreply@emparor.org
noreply@endedover.org
noreply@everstall.org
noreply@exhibot.org
noreply@extradish.org
noreply@fadran.org
noreply@fairlystar.org
noreply@farlor.org
noreply@findsympt.org
noreply@fonnora.org
noreply@forumsail.org
noreply@franora.org
noreply@frincer.org
noreply@funsta.org
noreply@galoral.org
noreply@gerror.org
noreply@grapenar.org
noreply@grevily.org
noreply@groupar.org
noreply@gryphal.org
noreply@gulared.org
noreply@gunthare.org
noreply@hallidor.org
noreply@hamelton.org
noreply@hardfind.org
noreply@harminy.org
noreply@heatsorb.org
noreply@herdenem.org
noreply@heronder.org
noreply@herotar.org
noreply@hikersail.org
noreply@hilpfull.org
noreply@hoursofplay.org
noreply@hungerbiz.org
noreply@icywave.org
noreply@idally.org
noreply@idealare.org
noreply@ilbane.org
noreply@insebit.org
noreply@italnor.org
noreply@jancer.org
noreply@janipera.org
noreply@jazzible.org
noreply@jellysystems.org
noreply@jinado.org
noreply@jonsorb.org
noreply@junglechar.org
noreply@juxtaposit.org
noreply@klonipan.org
noreply@labsort.org
noreply@lakesider.org
noreply@latertrail.org
noreply@lawsonfil.org
noreply@lemonthyme.org
noreply@lepord.org
noreply@linsine.org
noreply@lipad.org
noreply@lopano.org
noreply@lungor.org
noreply@martiniwale.org
noreply@minider.org
noreply@morganv.org
noreply@numpsi.org
noreply@olary.org
noreply@orchardstate.org
noreply@papersail.org
noreply@pastal.org
noreply@patsad.org
noreply@pauloral.org
noreply@payedover.org
noreply@pherna.org
noreply@photosun.org
noreply@placidlakes.org
noreply@pravaro.org
noreply@problemsort.org
noreply@quarzer.org
noreply@questional.org
noreply@ragar.org
noreply@ragors.org
noreply@recoursal.org
noreply@regallor.org
noreply@regalworry.org
noreply@remaindo.org
noreply@remakable.org
noreply@rf-tech.org
noreply@richardi.org
noreply@rippedout.org
noreply@riskvent.org
noreply@riversail.org
noreply@sampsere.org
noreply@sampuru.org
noreply@selectar.org
noreply@sempartil.org
noreply@sevensis.org
noreply@severil.org
noreply@shabily.org
noreply@singlebranch.org
noreply@softriver.org
noreply@sondor.org
noreply@speedadle.org
noreply@spikewell.org
noreply@spurrounder.org
noreply@storyfale.org
noreply@strokecount.org
noreply@stronder.org
noreply@strunger.org
noreply@stuwart.org
noreply@sunteral.org
noreply@supposar.org
noreply@taperegal.org
noreply@taskall.org
noreply@ten84.org
noreply@topperal.org
noreply@trailof.org
noreply@triplesay.org
noreply@troublesail.org
noreply@turfboy.org
noreply@twalve.org
noreply@twibill.org
noreply@ubata.org
noreply@ulod.org
noreply@undertrial.org
noreply@unifad.org
noreply@verddan.org
noreply@wardfall.org
noreply@wasona.org
noreply@wavymeadow.org
noreply@weared.org
noreply@welkary.org
noreply@whisperfield.org
noreply@wissell.org
noreply@wordof.org
noreply@workingcharge.org
noreply@worriedway.org
noreply@yielder.org
noreply@youtheral.org
noreply@zonerboard.org


#2

Do they have any common text in the body? Keyword filters can handle some global entries.

-Scott


#3

I just checked what I currently have and was unable to find anything, even the fake unsubscribe line is different in each


#4

The only commonality I see is that they’re all “noreply” from a .org. Being lazy, I’d just add a rule in my mail client to delete “noreply” messages from .org addresses.

Are you still getting them?

-Scott


#5

i thought about using the noreply, but wondered if that would also block a lot of legitimate stuff using noreply.

Yeah I’m still getting them constantly, I’ve done a whois and went to the domain provider since it’s all private and filed spam reports with them, doubt it will get anywhere though.


#6

wonder if a noreply@*.org would work in the filters