I know this may have been mentioned before, but maybe the spammers are using SA to design their spams??
That is unquestionably true, and it's also very well known.
The abuse of the "multiple mailers" and fake quoting and fake pgp signatures seen earlier this year were VERY clearly targeted at abusing the rule scores in SA 2.50-2.53. There's absolutely no other reason why those mails would have been constructed in such a bizarre and complicated manner.
It's definitely no secret, or surprise.. Spammers are DEFINITELY aware of spamassassin and are trying to avoid it.
Which is why 2.54 got a new scoreset without as many negative scoring comp rules that could be easily faked.
They are aware of us (and probably reading these messages) just as much as we are aware of them. It's the classic arms race that has always been a part of SA...
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
