Hi.  Just joined up the list.  I started using SpamAssassin about a
week ago.  Seems to be working well, but still a few false positives
and false negatives (more of the latter).

Anyway, I wanted to see if I could get help dealing with one repeating
annoying spam message.  Actually, I think the message is coming from a
virus (i.e. machines that have been infected with the virus), but it
seems the message can be dealt with as if it were spam.  I'm talking
about the "goldfish" message, as the subject states.

I've been getting these repeatedly for a while now (and it was one of
the ones I was hoping SpamAssassin would help me deal with).  I have
two saved copies of it, to use to see what's common among the messages.

Both contain "goldfish" in the subject, one is just plain "goldfish"
and one is "Fw: goldfish".

Both come from hotmail addresses.

Both have attachments, one is application/octet-stream, one is
audio/x-midi.

Both say:

  Hi Dear
  Check the attach
  See u

in the body of the message (in HTML).

I was thinking that these messages would already be covered by
existing SpamAssassin rules, since it seems like a fairly common spam
message that people are getting.  But apparently not.  I did
web/newsgroups search at google on "spamassassin goldfish" (and also
"procmail goldfish", since I'm using procmail, and spamassassin in
conjunction with procmail) and didn't turn up anything relevant.

I was thinking perhaps someone on this list has already figured out a
way to catch these messages, or would have an idea how within the
existing SpamAssassin framework -- i.e. no need for new rules.

One perhaps complicating factor is I don't have direct access to
SpamAssassin on the machine where I read my email.  That's because
mail processing (including running SpamAssassin) is done on some
backend machines, and they don't have SpamAssassin installed on the
frontend machines.

Thanks for any help/suggestions you can offer.

Milt Epstein
Research Programmer
Integration and Software Engineering (ISE)
Campus Information Technologies and Educational Services (CITES)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]



-------------------------------------------------------
This sf.net emial is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to