After feeding this spam to sa-learn --spam (I got several copies as
well), it's now caught solely by Bayes (which is 5.2, plus Spamcop has
now blacklisted it for an extra 1.5). For those using procmail to
filter and then forwarding to a non-Unix mail reader, I wrote up a short
summary of how to setup mistake-based Bayes training.
<http://www.dankohn.com/archives/000323.html>.
Of course, if you really just want to stop spam from ournames.com, then
add the line "blacklist_from [EMAIL PROTECTED]" to your user_prefs.
- dan
--
Dan Kohn <mailto:[EMAIL PROTECTED]>
<http://www.dankohn.com/> <tel:+1-650-327-2600>
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jonathan Nichols
Sent: Saturday, October 18, 2003 16:21
To: SA
Subject: [SAtalk] How to filter this?
I've had 5 variants of this slip through, all of them have
"ournames.com" in the source but varying "from" addresses.
Thank you! :)
Return-Path: <[EMAIL PROTECTED]>
Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
by mail.pbp.net (Postfix) with ESMTP id D453317A0B
for <[EMAIL PROTECTED]>; Sat, 18 Oct 2003 13:34:20 -0700 (PDT)
Received: from localhost (unknown [127.0.0.1])
by mailgate.pbp.net (Postfix) with ESMTP id C66F4A4683
for <[EMAIL PROTECTED]>; Sat, 18 Oct 2003 20:34:20 +0000 (UTC)
Received: from s1.ournames.com (s1.ournames.com [203.192.162.194])
by mailgate.pbp.net (Postfix) with ESMTP id EF1A0A467C
for <[EMAIL PROTECTED]>; Sat, 18 Oct 2003 13:34:18 -0700 (PDT)
From: "Mike" <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Go to hell!
Date: Sat, 18 Oct 2003 13:27:02 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_530C_1E0A4F04.F67B8F12"
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
mailgate.pbp.net
X-Spam-Level:
X-Spam-Status: No, hits=0.2 required=5.0 tests=BAYES_44,HTML_50_60,
HTML_MESSAGE autolearn=no version=2.60
X-Virus-Scanned: by AMaViS 0.3.12
This is a multi-part message in MIME format.
------=_NextPart_000_530C_1E0A4F04.F67B8F12
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Have you seen this? We went to the end of the earth all over msn groups
and yahoo who are desperate to fool around as weirdly as you like
Who knows.
gone
------=_NextPart_000_530C_1E0A4F04.F67B8F12
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.3516.2800" name=GENERATOR>
<STYLE>
</STYLE>
</HEAD>
<BODY>
<DIV>
<CENTER>
<H2>Have you seen this? We went to the end of the earth all over msn
groups and yahoo who are desperate to fool around as weirdly as you
like</H2>
<A HREF="http://www.ournames.com/oct13/a246.html";>
<H2>Who knows.</H2>
</A>
<BR>
<BR>
<BR>
<BR>
<A HREF="http://www.ournames.com/end.html";>
<H5>gone</H5>
</A>
</CENTER>
</DIV>
</BODY>
</HTML>
------=_NextPart_000_530C_1E0A4F04.F67B8F12--
-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise
Linux in the Boardroom; in the Front Office; & in the Server Room
http://www.enterpriselinuxforum.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise
Linux in the Boardroom; in the Front Office; & in the Server Room
http://www.enterpriselinuxforum.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
