store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Sat May 25, 2013 6:44 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 4 posts ] 
Author Message
 Post subject: Request for new rules
Unread postPosted: Fri Oct 22, 2010 1:23 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 24, 2008 12:05 pm
Posts: 145
I was wondering if it is possible to request new rules? I run a hosted service that is is targeted quite a lot by spammers. Most spam is detected by our own 'bad words/sites' list and the already present Atomicorp rules, but a significant amount is still getting through.

I can send copies of the most recent spam posts that are not being detected if you like. All of these follow a specific pattern that can be matched by a reqex.


Top
 Profile  
 
 Post subject: Re: Request for new rules
Unread postPosted: Fri Oct 22, 2010 1:28 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3249
Location: Chantilly, VA
Absolutely. Just send an email to support@atomicorp.com and let us know what you need.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Request for new rules
Unread postPosted: Fri Oct 22, 2010 1:45 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 24, 2008 12:05 pm
Posts: 145
E-mail sent :)


Top
 Profile  
 
 Post subject: Re: Request for new rules
Unread postPosted: Sat Oct 30, 2010 5:04 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3249
Location: Chantilly, VA
In case anyone else is following this thread, the spam is what I would call "gibberish" spam - which is probably annoying a lot of other folks too. It looks like gibberish text, a link, and maybe more gibberish. Easy for a human to detect, surprisingly hard for a computer which may be why the spammers are trying this (but who would pay attention to the gibberish links? Not people, but maybe Search Engines as an SEO attack?)

We put out some new rules this week for that kind of spam and are still working with Sempiterna on other examples that the new rules may be missing. If you have any spam cases that get past the Atomicorp rules, please let us know - those kinds of samples are exactly what we need. Email any samples you may have to support AT atomicorp DOT com.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 4 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group