On 03/17/2006 06:59 PM, Dimitri Yioulos wrote: > Hello to all. > > I apologize for earlier posts on this subject; they were tagged by the list > because I included the body of the spam which is being delivered to my users! > > So, there's hope that I can quash this. I searched the archive, but didn't > find anything (my search criteria may have been wrong). > > Over the last few days, mail such as the following has not been tagged. The > subject is Re: Pharamacmky news. The subject will change slightly, as in re: > PharamaMzcy news. > > I have sa 3.0.4-1 (had a bit of trouble w/ 3.1.0, haven't tried reinstalling > yet) on a CentOS 3.6 box. I'm using a number of SARE rulesets, as well as > pyzor, razor, and dcc. My MTA is semdmail--8.12.11-4.RHEL3.1. > > Many thanks. > > Dimitri >
Hi, Same problem for me (using Spamassassin 3.1.0). I keep feeding sa-learn the "Re: PharamaCFcy news", always the same style of message but each time slightly different, the drugs and prices are on the left and rubbish like this dacgvishJybzjjt is on the right. The spam mail itself is in html and the source has lots of this style =3D "float: right"> f </span>a<span=20 style =3D "float: right"> n </span>I<span=20 style =3D "float: right"> w </span>i<span=20 style =3D "float: right"> h </span>u<span=20 style =3D "float: right"> r </span>m <FONT color=3D#F5421A>$1<span=20 style =3D "float: right"> v </span>05</FONT> (3<span=20 style =3D "float: right"> Z9 </span>0 <span=20 style =3D "float: right"> q </span>p<span=20 style =3D "float: right"> w </span>i<span=20 style =3D "float: right"> y </span>l<span=20 style in it and no matter how much I feed to sa-learn I keep getting a Bayes score of 00 (BAYES_00=-2.599). I'm interested to know more about this type of SPAM and what people suspect is happening. Thanks, Warren.
