-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Pat,

Saturday, August 2, 2003, 7:48:55 AM, you wrote:

PT> My primary question is this - I've got version 2.54, which is nearly
PT> the latest version.  But the spammers are customizing their messages
PT> to fool this current version, and I get a fair amount of spam every
PT> day.  I have to believe that you all are finding ways to plug these
PT> holes, and perhaps you're all sharing these new rules somehow.  At
PT> least that's what I'm hoping.

What do you mean by "fair" amount?  My version, 2.55, is equivalent to
yours, and I get maybe a dozen spam total to 50+ email accounts in a
week.

PT> Lately, I'm getting a lot of spam that is primarily a simple email
PT> with little more than an image with a link.  A similar one is a
PT> paragraph of seemingly random words, followed by the image/link,
PT> followed by another paragraph of random words.

I've chosen to handle these with URI rules to these links. Spam me once,
shame on you. Spam me twice, shame on me.
uri      L_u_greatnewpharm /greatnewpharm\.com/i
describe L_u_greatnewpharm Body text references known spammer
score    L_u_greatnewpharm 9.1

I also check the Received-from chain, and the subject header, to see if I
can identify anything there that will help me flag spam.

PT> I've seen a lot of reference to the Bayes database and sa-learn, but
PT> I'm having a hard time finding somewhere that it explains it all and
PT> how I can utilize it.

I can't help you with the install (it was done for me), but it's a
marvelous tool you definitely should use (along with the network
blacklist tests).

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPyxM3ZebK8E4qh1HEQI/jwCggeqnZ+CqVbikUTNbmbAY5ndpBN8An2cS
f/p6bqUGTJfFHWmY1Rxp10dH
=ifvM
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to