> -----Original Message----- > From: Jonathan Nichols [mailto:[EMAIL PROTECTED] > Sent: Monday, August 18, 2003 2:51 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] spamvertized rule? > > > Wasn't there a rule for "images hosted on a spamvertized domain" > somewhere? > > Here's a snip from one that slipped through today.. > > Subject: HypnoTrick - See these dirty girls get hypnotised! > [18+]xlpV8 > Message-Id: <[EMAIL PROTECTED]> > X-Spam-Status: No, hits=2.6 required=5.0 > tests=BAYES_60,HTML_IMAGE_ONLY_02,MIME_HTML_ONLY > version=2.55 > X-Spam-Level: ** > X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) > X-Virus-Scanned: by AMaViS 0.3.12 > > <html><body bgcolor="#FFFFFF"><center><table width="600" border="0" > align="center" > cellpadding="0" cellspacing="0"><tr><td><img > src="http://sincentral.com/_/site/nx/images/spacer.gif"; width="300" > height="1" > border="0"></td><td><img > src="http://sincentral.com/_/site/nx/images/spacer.gif"; width="300" > height="1" border="0"></td><td><img > src="http://sincentral.com/_/site/nx/images/spacer.gif"; > width="1" height="1" border="0"></td></tr> >
They are easy. The wiki (www.exit0.us) has many an example. There has been work done to make it even easier to make these. uri L_SINCENTRAL /?:sincentral\.(com|net|biz)/i describe L_SINCENTRAL Local rule to catch evil sincentral domain score L_SINCENTRAL 1.01 Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wonka ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
![http://sincentral.com/_/site/nx/images/spacer.gif"](http://sincentral.com/_/site/nx/images/spacer.gif"){kind=link}