I've noticed recently that spam is starting to creep through the cracks of
SA. I looked at one of them, and it seems this spammer is trying to foil
the spam-filters, especially Bayes.
The spam message contains a large number of dictionary words written in
HTML in WHITE, so they don't appear on the spam-message itself, plus of
course the usual spam attachments with links and gifs and stuff. Here is a
sample of the words that appeared in the message:
<font color="#ffffff">eutectic scarf tailing identifiable corresponded
scatting evaporating plunges tappa mediates hubs admirer matte imagining
accords advantageously mathematicians hues exorcise postposition tamer
creaming angola argive couplers amsterdam telegrams mentor explanatory
bombardment plucking megalomania blvd tatter courts arpa mendacity
explicit bonaparte....
My worry is that if this message is passed on to sa-learn, the Bayes
database will be screwed up. Or, be less discriminating at best.
The SA status line was:
X-Spam-Status: No, hits=1.4 required=5.0
tests=HTML_60_70,MIME_HTML_ONLY,PYZOR_CHECK
version=2.55
It seems Pyzor had it registered, but that did not raise the score enough
to catch it.
What can be done to plug this hole?
Best regards,
Morten
--
Morten Kjeldgaard
Department of Molecular Biology, Aarhus University
Gustav Wieds Vej 10 C, DK-8000 Aarhus C, Denmark
Lab +45 89425026 * Mobile +45 89428063 * Fax +45 86123178
Home +45 86188180 * ICQ 27224900 * http://imsb.au.dk/~mok
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
