SARE_SPOOF_EBAYFORM - lots of false positives

2006-06-20 Thread Peter Campion-Bye
Last few genuine emails from ebay UK have started to trigger this rule. Might be worth whoever is responsible for this one taking a look, in the meantime I'll override the score to 0. Can provide an example message if necessary, let me know (don't want to send it to everyone as it's 37K)

Charity spam - is this a new kind of 419?

2006-04-24 Thread Peter Campion-Bye
Received the message below at the weekend. I could be completely wrong and this is a genuine misguided attempt at recruiting charity workers, but it looks to me like a new kind of 419 scam - if you show an interest I suspect they will want bank account details and/or money up front. Suspicious tha

RE: whitelist file

2005-12-21 Thread Peter Campion-Bye
> > To Better-Scripters-Than-Me: would this work? I know there's probably a better way, but if it works as written, it would avoid creating duplicate email addresses. Much easier to remove the duplicates with a 'sort -u' once you've finished appending.

'meds' spam

2004-11-18 Thread Peter Campion-Bye
The only spam that's getting through on my system these days seems to have 'meds' and 'rx' in common. I would have thought that antidrug was the ruleset to pick up stuff such as this: --Spam Start--- Subject: meds saving zone your assor