There's an easy solution to the hispeedmedia problem: add these to your local rules
header HISPEEDMEDIA Reply-To =~ /hispeedmedia.com/ describe HISPEEDMEDIA Bulk email reply to found in headers score HISPEEDMEDIA 5 Kai Schaetzl wrote: Lately, we are getting a LOT of spam from a vendor which seems to call itself HiSpeedMedia or HSM. They use several custom "list" domains (f.i. hsm2282jende119283000send.com, 4list-11873649hsm987.com, list11873649hsm987.com, hsmdatabaseclump182643, hsmlistcluster182643library.com) specifically registered just for spamming and "one-day use" and include an invalid HTML body which builds the message from images only. They seem to spam only email addresses they harvested from whois, I'm not getting this on other email accounts. Since there's not much text in them SA has only the header for some scoring and only achieves between 1 and 3.5, mostly around or less than 2. SA isn't able to detect even one of them as spam (using the default limit of 5) and, more or less, these count for most of the misses SA has on the spam. ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
