Let me preface this by saying that this may not work for everyone, but here
are the rules I use on my server to dump Korean spam, because we were
getting 50-60 a day at one time.
header CHECK_KOREAN1Content-type =~ /ks_c_5601-1987/i
describe CHECK_KOREAN1 Content-type contains
I have had this rule for a while because of all of the weight loss spam we
have been getting:
body CS_LOSE_WEIGHT /los[et] the weight/i
describe CS_LOSE_WEIGHT Add for losing weight
score CS_LOSE_WEIGHT3
This is how SA scored the message below:
X-Spam-Status: No,
:
>
>
> On Friday 02 January 2004 10:21 am, Chip Sutton wrote:
>
> > We have been receiving a lot of messages that are not being scored high
> > enough because in addition to the random words, they are obfuscating the
> > text in the html section with bogus tags. Here
I am new to this list and looked through the archives but did not see this
specifically addressed. If it has been I apologize in advance and maybe
someone can point me to a thread.
We have been receiving a lot of messages that are not being scored high
enough because in addition to the random wor
