On Wed, Jan 26, 2005 at 11:11:08AM -0600, Steven Rocha wrote:
[Can you please adjust your line length?]
> I have been lurking for a while and finally come up for air. I
> recently upgraded to 3.0.2, added appropriate rulesemporium.com
> rulesets (removed the old 2.6X rules), and modified some scores
> for our clients. We are still getting a ton (100-150) investor/stock
> spams a day. Just checking to see if anyone has seen this problem
> and written a rule to score these emails. If not, I will write my
> first rule, test it, and then send it to rulesemporium/spamassassin
> list for any recommendations.
Hm, just came in here:
X-Spam-Status: Yes, score=23.6 required=15.0 tests=BAYES_99,HTML_10_20,
HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,
RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_XBL,
RCVD_NUMERIC_HELO,SARE_HTML_HTML_AFTER,SARE_MONEYTERMS,
SARE_OBFUMONEY1,STOCK_PICK,STRONG_BUY autolearn=spam
Also, I have a very basic rule:
body INTERSHOP_STOCK1 /^Investor A|ert.+Brand new stock for your attention/
score INTERSHOP_STOCK1 4.5
describe INTERSHOP_STOCK1 stock alert spam
HTH,
Rainer
