Pat Traynor <[EMAIL PROTECTED]> wrote:
>
> My primary question is this - I've got version 2.54, which is nearly
> the latest version. But the spammers are customizing their messages
> to fool this current version
If you install the Net::DNS module (not a requirement), SpamAssassin can
add various DNS BlackLists to its repertoire of rules. So even if
spammers are trying to fool you with body text, the headers will still
give them away.
Also, I have disabled most of the "negative-nice" rules that SA uses, by
adding these lines to my ~/.spamassassin/user_prefs:
score IN_REP_TO 0.0
score MSGID_GOOD_EXCHANGE 0.0
score EMAIL_ATTRIBUTION 0.0
score USER_AGENT_MOZILLA_UA 0.0
score USER_AGENT_VM 0.0
score REFERENCES 0.0
I'm using an older version where these rules are scored particularly
negatively, but your upgraded version may not need all of these turned
off. Whenever I get a spam, I run it through "spamassassin -t" to see
the full score report, and try to determine if any negative-scored rules
are doing me a disservice.
> Lately, I'm getting a lot of spam that is primarily a simple email
> with little more than an image with a link. A similar one is a
> paragraph of seemingly random words, followed by the image/link,
> followed by another paragraph of random words.
SA is not a 100% solution, so you will still see the occasional spam
slip through. Folks are always working on new ideas for rules to detect
these things, but it is a case of continuous improvement. At the
moment, confronted with these types of spams, I'm not sure what SA could
do to try and detect them. But someone will probably think of
something. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
