I'm getting a lot of spams slipping thru the net lately. They hit BAYES_99 and nothing else, usually, because they contain almost no content other than a URL:

http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without

URIDNSBL is apparently skipping that due to it being geocities.

debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84e6960) implements 'parsed_metadata' debug: uri found: http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without
debug: URIDNSBL: found domain geocities.com in skip list
debug: URIDNSBL: domains to query:

Does anyone have a good method for trapping these mails?

The subject and body are not much help... here's what I have:

Subject: re: concepcion
pamula

http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without

bryce

-jsd-

Reply via email to