Hi Chris, On Mon, Dec 29, 2003 at 09:58:33AM -0600, Chris Thielen wrote: > Stephane Lentz said: > > Hi, > > > > it seems that there are many spam lately offering to view the > > Paris Hilton video. > > I tried to devise a rule to spot such spam but with no success > > (either with 2.55 or 2.60 - upgrade to 2.61 planned) > > .... > Please post the full spam with headers. I believe URI rules should be run > after attachments are decoded so there might be something else going on > here.
=> Thanks for the info. Two samples of such spam are now available at http://milter.free.fr/spam/ (hilton-sample1.txt & hilton-sample2.txt files) I did some tests with SA 2.61 : these messages trigger the HTML_MIME_NO_HTML_TAG test. > Also, another way to attack this is to look for "paris hilton". Try the > rules generated here: > http://sandgnat.com/cmos/cmos.jsp?words=%22paris+hilton%22 => Thanks for the link. i will check it out. I was willing to avoid the matching "Paris Hilton" if possible as I live in Paris and some of my colleagues may book some rooms in Hilton hotels (one never knows) .... > Finally, FYI you hijacked another thread by replying to an unrelated > message. Next time simply send a new message to the list address instead. > => Sorry for that ! Bad MUA sequences ... Regards, SL/ ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
