Re: New spam rule for specific content

2013-08-10 Thread John Hardin
On Sat, 10 Aug 2013, Amir 'CG' Caspi wrote: At 2:17 PM -0700 08/10/2013, John Hardin wrote: Perhaps it's time to bring FuzzyOCR up-to-date...? Is this something I need to manually update or something that needs updating in the SA distribution? FuzzyOCR was a SA plugin a few years back. It

Re: New spam rule for specific content

2013-08-10 Thread Amir 'CG' Caspi
At 2:17 PM -0700 08/10/2013, John Hardin wrote: Perhaps it's time to bring FuzzyOCR up-to-date...? Is this something I need to manually update or something that needs updating in the SA distribution? Thanks. --- Amir

Re: New spam rule for specific content

2013-08-10 Thread John Hardin
On Sat, 10 Aug 2013, Amir 'CG' Caspi wrote: It looks like both this and the previous type of spam are bypassing Bayes by embedding images and using no rendered text. Well, not NO text, but very little, mostly a "successful delivery" message and the unsub/report links. That is, Bayes sees abso

Re: LONGWORDS not hitting?

2013-08-10 Thread Amir 'CG' Caspi
At 12:42 PM -0600 06/30/2013, Amir 'CG' Caspi wrote: Hi all, Just got this spam: http://pastebin.com/KM5paaZ9 To me, it looks like LONGWORDS should have hit... but it didn't. I ran it manually through spamassassin and spamc, and LONGWORDS still didn't hit, so it seems to just not be

Re: New spam rule for specific content

2013-08-10 Thread Amir 'CG' Caspi
At 10:41 AM -0700 08/09/2013, John Hardin wrote: Can you provide a spample or two? Looks like a similar spam method has come out in recent weeks (since Jul 30, it seems) that uses slightly different footers... example is here: http://pastebin.com/QCmSPzwG Although running SA on this spam _