> -----Original Message-----
> From: Colin Henein [mailto:[EMAIL PROTECTED] 
> Sent: 24 July 2003 17:32
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Oops... running 2.60
> 
> 
> Greetings all,
> 
> I've been running 2.60 for several months (must have picked 
> the wrong download back there somewhere). 
> 
> I haven't been having any problems, but I wanted to know if 
> I'd be getting better filtering with 2.55. Not sure how the 
> rule tuning works, and whether I'm better off with the 2.60 
> ruleset (more modern) or the 2.55 ruleset (better tuned?).
> 
> Should I step back to 2.55?
> 
I've found 2.60 is a generaly bit better than 2.55, but recently the spammers have
worked around it... I now get about a couple of dozen spams a day coming in with
ridiculously low scores (<2, usually) - they're heavily exploiting the low scoring 
HTML_IMAGE_ONLY rules*

I'd expect 2.55 will have been so thoroughly worked around now as to be nearly useless,
if 2.60 is being beaten so quickly..

Tony

* 3 examples I got in the last hour:

X-Spam-Status: No, hits=1.5 tagged_above=-10000.0 required=5.0
 tests=FORGED_RCVD_HELO, HTML_50_60, HTML_IMAGE_ONLY_08, HTML_LINK_CLICK_HERE,
 HTML_MESSAGE, HTML_TITLE_EMPTY, MSGID_FROM_MTA_LATER

X-Spam-Status: No, hits=-2.7 tagged_above=-10000.0 required=5.0
 tests=BAYES_00, EXCUSE_3, HTML_40_50, HTML_IMAGE_ONLY_12,
 HTML_IMAGE_RATIO_06, HTML_MESSAGE, HTML_WITH_BGCOLOR, NORMAL_HTTP_TO_IP,
 RAZOR2_CF_RANGE_11_50, RAZOR2_CHECK

X-Spam-Status: No, hits=0.6 tagged_above=-10000.0 required=5.0 tests=BAYES_00,
 DATE_IN_FUTURE_12_24, HTML_50_60, HTML_IMAGE_ONLY_04, HTML_MESSAGE,
 HTML_WEB_BUGS, MAILTO_LINK, MIME_HTML_ONLY, PORN_4




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to