Eddy Beliveau wrote:

Hi!

I'm running spamassassin 2.4 with pamCopURI 0.24 and it work perfectly. Thanks ;-)

My current problem is that I cannot get rid of those online pharmacy spams. (see attached picture). The email contains a picture and many words in font size 1.

Am I the only one to receive this junk.

Can someone help ?

Hello,

I finally upgraded to 3.0.3 (plus patches) yesterday since SA 2.64 and SpamcopURI 0.25 cannot identify these by default.

However, from this very list I obtained the following rule (I had to search the gmane newsgroup as I was sure I saw this go by):

rawbody         __LW_URI_CR1 /href=\"[^"]*\r[^\n]/is
full            __LW_URI_CR2 /href=\"[^"]*\r[^\n]/is
meta            LW_URI_CR    __LW_URI_CR1 || __LW_URI_CR2
score           LW_URI_CR    (YOUR CHOICE)
describe        LW_URI_CR    unescaped cr in uri


and it was quite effective at spotting them. I was scoring this pretty high and had no FPs.

Good luck,

Chris

Reply via email to