Does anyone have any suggestions for rules to block the spam I have
included below?  I am running SA 2.60.  I have included the source from
the message body, and the SA score summary.

I was thinking searching for the following phrases, each with a score of
.5:

lose the weight, struggling to lose, believe how simple, amazing patch,
shed the pounds, guaranteed to work, your money back

I was also thinking I should add a BigEvil style rule (assuming the url
isn't in the new one when I update it later today) for holdontrywow.com
with a score of 3.

This would give the message a total of 7.2 with the hits from SA(5.0
gets it blocked).

Tim Donahue

[SA Score Summary]

X-Spam-Status: No, hits=0.2 tagged_above=0.0 required=5.0
tests=HTML_MESSAGE,
 MY_TITLE, RM_rb_ANCHOR, RM_rb_BODY, RM_rb_BREAK, RM_rb_DIV, RM_rb_FONT,
 RM_rb_HTML, RM_rb_TITLE

[Message Source]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>

<TITLE>Message</TITLE>

<META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD>
<BODY>
<DIV><!-- Converted from text/plain format --><FONT face=Arial size=2>
<A HREF="http://www.holdontrywow.com/m2/index.php?AFF_ID=m4";>
Hello,<BR>
<BR>
I finally was able to lose the weight I have<BR>
been struggling to lose for years!<BR>
<BR>
And I couldn't believe how simple it was!<BR>
Amazing patch makes you shed the pounds!<BR>
It's Guaranteed to work or your money back!<BR></A>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<a href="http://www.holdontrywow.com/homepage/";>Not
intreseted</a><br></FONT></DIV></BODY></HTML>
agone nobleman entourage fizzle impetuous bertram adamant phycomycetes
morale hydrous leeward loquacious lebanon routine shouldn't lobular
civic callaghan response blustery gerund appeal glamorous horn <br>
ponchartrain crab guiding aid capitol hydrogen imbecile mood famine
grown pillage inflammation schlitz bugging librate antisemitic
inconsiderate dilapidate goode knife histogram shark alewife piety <br>
gentry loam climate ptarmigan pillsbury craftsmen flimsy concessionaire
benedict instantaneous counterfeit abetted align await acrylic anglican
fiction chinese corps fibonacci bacchus flautist fields gimpy autism
shapiro hercules attendee rapid company assiduity producible <br>
centrifugal cowpea barry cupful rockwell hex pervert farthest evans
congenital fafnir kirchner netherworld robin impalpable lice harmonious
patrick <br>
beseech incorrigible amputee ritual micrography dahlia pillar abo
cretinous pow declaratory april lise coiffure auerbach furrier allow
macedon handcuff gladden foil cambrian irrefutable illustrate hazardous
jade ditty catapult cap few glimpse hyphenate dam borax <br>
dearborn inorganic director recursion compactify clitoris default
flourish now giacomo broken laymen insupportable cochineal inimitable
burro consanguine han acronym salami preferring gerundial caldwell
buttock niacin inhibit conjugacy minion hockey luminance hike bangor
habitation hip coarsen gown hippo joule retail <br>
pecuniary rimy morse chinatown filmstrip bowman hydrophilic busch
corpuscular bodyguard dacca goes audience geography cruz chelate bereft
greenish bibb nip deploy braid cowgirl armadillo cleft giuseppe alkene
shard herself inaudible barberry lumen glutton <br>
bloodstream macintosh expository scheme conley premeditate ragging
deliquescent miocene cerebellum hugo oyster crumple earthquake
coloratura coolant handclasp placental cosmic exhaust gemlike geodesy
hippocratic committeemen capitulate cornflower <br>
bodyguard adkins anthony politician marks lopsided arena alfredo
helsinki chess experiment decreeing irate alameda ambrosia capillary
<br>
amatory humphrey colonnade cowpox oscillatory puddingstone conscript
howe apologetic inherit multiplicand <br>


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to