I have experience with spamassassin and I write many others rules by
myself..
(my english can be poor, but i'm not stupid...)
Thank you for help
Kai Schaetzl escreveu:
You don't, I think. You asked "how can I make a rule ...". I gave you some
hints which matches you could use for good rul
Rejaine Monteiro a écrit :
>
> Here are two samples attached..
> (some informations are changed)
please don't forward spam to the list (they poison learning filters,
they may be blocked/discarded, ... etc).
instead, put unaltered full samples on a web page, for example on
pastebin.com. to get a
John Wilcock wrote on Wed, 21 Jan 2009 17:52:46 +0100:
> Perhaps if you posted a few *complete* samples with *full headers*,
> others could see which rules are hit and suggest improvements...
but please to a pastebin or so!
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Interne
Rejaine Monteiro wrote on Wed, 21 Jan 2009 14:41:08 -0200:
> Yes , I'm understanding what you saying
You don't, I think. You asked "how can I make a rule ...". I gave you some
hints which matches you could use for good rules.
However, I think now what you wanted to ask is "I want some ready-mad
Here are two samples attached..
(some informations are changed)
John Wilcock escreveu:
Perhaps if you posted a few *complete* samples with *full headers*,
others could see which rules are hit and suggest improvements...
John.
--- Begin Message ---
Prezado Cliente(a)
Segue em anexo conform
Le 21/01/2009 17:41, Rejaine Monteiro a écrit :
But, I'm receive a *lot* of spam like this... (another case abelow) and
I don't no how stop this ...
Perhaps if you posted a few *complete* samples with *full headers*,
others could see which rules are hit and suggest improvements...
John.
--
Yes , I'm understanding what you saying and also understand the
implications of FPs
But, I'm receive a *lot* of spam like this... (another case abelow) and
I don't no how stop this ...
(sorry , my english is very poor)
http://7g5emg.blu.liv=
efilestore.com/y1pcQCMDJb4PY_kjFJywVsV-OkV-UUY
Rejaine Monteiro wrote on Wed, 21 Jan 2009 08:58:21 -0200:
> href="http://knut.kumoh.ac.kr/~dojamo/zero/log/attachs.php?id=HU#9123IF";>PRICES.pdf
>
use a regexp that matches "NOT .pdf" at the end of the hyperlink and ".pdf" in
the
link text.
> href="http://knut.kumoh.ac.kr/~dojamo/zero/log
Rejaine Monteiro wrote on Wed, 21 Jan 2009 11:23:33 -0200:
> the text suggests a link to a pdf file, but in the truth it is not.
But you know this only afterwards. This may be true for all your cases and
worthwhile to block, but it may produce FPs in general. I think that's
what Kenneth wanted
Le 21/01/2009 14:23, Rejaine Monteiro a écrit :
the text suggests a link to a pdf file, but in the truth it is not.
In this specific case perhaps, but there's absolutely nothing to stop a
legitimate php script (or any other URL for that matter) generating a
legitimate PDF file. The only way
the text suggests a link to a pdf file, but in the truth it is not.
Kenneth Porter escreveu:
How do you *know* that the email is trying to deceive the user?
Legitimate email might have the same pattern of one name in the link
and another in the visible text. There's nothing in the text you
--On Wednesday, January 21, 2009 8:58 AM -0200 Rejaine Monteiro
wrote:
The email tries to deceive usesr
How do you *know* that the email is trying to deceive the user? Legitimate
email might have the same pattern of one name in the link and another in
the visible text. There's nothing in t
'dojamo' was just a simple example..
of course, many others different links or names files and urls are used
Benny Pedersen escreveu:
On Wed, January 21, 2009 11:58, Rejaine Monteiro wrote:
How can I make a rule to block fake links to pdf files, like this?
http://knut.kumoh.ac.kr/~dojamo/ze
On Wed, January 21, 2009 11:58, Rejaine Monteiro wrote:
> How can I make a rule to block fake links to pdf files, like this?
>
> href="http://knut.kumoh.ac.kr/~dojamo/zero/log/anexos.php?id=GF#590KI";>(106,5KB)
>
> The email tries to deceive usesr, bypassing for an attached file.
rawbody FAKE
14 matches
Mail list logo
