http://www.uribl.com/usage.shtml
---- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -----Original Message----- > From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] > Sent: 17 March 2006 15:38 > To: users@spamassassin.apache.org > Subject: Re: This isn't being tagged > > I want to bottom-post, but ... > > Martin, > > Forgive my ignorance, but what is URI_BLACK? Where can I get > info on it? How > do I implement it. > > Thanks. > > Dimitri > > On Friday March 17 2006 10:25 am, Martin Hepworth wrote: > > And once again the URI_BLACK shows how useful it can be by > being ahead of > > the other URI-RBLS. > > > > -- > > Martin Hepworth > > Snr Systems Administrator > > Solid State Logic > > Tel: +44 (0)1865 842300 > > > > > -----Original Message----- > > > From: Randal, Phil [mailto:[EMAIL PROTECTED] > > > Sent: 17 March 2006 15:04 > > > To: users@spamassassin.apache.org > > > Subject: RE: This isn't being tagged > > > > > > Hmm, > > > > > > We're blocking loads of these: > > > > > > 2.91 DCC_CHECK Listed in DCC > > > (http://rhyolite.com/anti-spam/dcc/) > > > 2.00 HC_NEWS News of new spam > > > 0.10 HTML_70_80 Message is 70% to 80% HTML > > > 0.10 HTML_FONTCOLOR_RED HTML font color is red > > > 0.10 HTML_FONTCOLOR_UNSAFE HTML font color not in > safe 6x6x6 > > > palette > > > 0.10 HTML_MESSAGE HTML included in message > > > 1.10 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence > between 51 and > > > 100 > > > 1.05 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) > > > 2.50 RCVD_IN_BL_SPAMCOP_NET Received via a relay in > bl.spamcop.net > > > 3.00 RCVD_IN_CBL Received via a host in cbl.abuseat.org. > > > 2.60 RCVD_IN_DYNABLOCK Sent directly from > dynamic IP address > > > 3.00 RCVD_IN_PSBL Received via a relay in PSBL > > > 0.10 RCVD_IN_SORBS SORBS: sender is listed in SORBS > > > 3.00 RCVD_IN_SPAMHAUS_SBL_XBL Listed in > SPAMHAUS SBL+XBL > > > 5.00 URIBL_BLACK Contains an URL listed in the > URIBL blacklist > > > > > > HC_NEWS just checks for the word "news" in the Subject line. > > > > > > Cheers, > > > > > > Phil > > > ---- > > > Phil Randal > > > Network Engineer > > > Herefordshire Council > > > Hereford, UK > > > > > > > -----Original Message----- > > > > From: Warren Howard [mailto:[EMAIL PROTECTED] > > > > Sent: 17 March 2006 14:40 > > > > To: Dimitri Yioulos; users@spamassassin.apache.org > > > > Subject: Re: This isn't being tagged > > > > > > > > On 03/17/2006 06:59 PM, Dimitri Yioulos wrote: > > > > > Hello to all. > > > > > > > > > > I apologize for earlier posts on this subject; they were > > > > > > > > tagged by the list > > > > > > > > > because I included the body of the spam which is being > > > > > > > > delivered to my users! > > > > > > > > > So, there's hope that I can quash this. I searched the > > > > > > > > archive, but didn't > > > > > > > > > find anything (my search criteria may have been wrong). > > > > > > > > > > Over the last few days, mail such as the following has not > > > > > > > > been tagged. The > > > > > > > > > subject is Re: Pharamacmky news. The subject will change > > > > > > > > slightly, as in re: > > > > > PharamaMzcy news. > > > > > > > > > > I have sa 3.0.4-1 (had a bit of trouble w/ 3.1.0, haven't > > > > > > > > tried reinstalling > > > > > > > > > yet) on a CentOS 3.6 box. I'm using a number of SARE > > > > > > > > rulesets, as well as > > > > > > > > > pyzor, razor, and dcc. My MTA is semdmail--8.12.11-4.RHEL3.1. > > > > > > > > > > Many thanks. > > > > > > > > > > Dimitri > > > > > > > > Hi, > > > > > > > > Same problem for me (using Spamassassin 3.1.0). I keep > > > > feeding sa-learn > > > > the "Re: PharamaCFcy news", always the same style of > message but each > > > > time slightly different, the drugs and prices are on > the left and > > > > rubbish like this dacgvishJybzjjt is on the right. The spam > > > > mail itself > > > > is in html and the source has lots of this > > > > > > > > style > > > > =3D "float: right"> f </span>a<span=20 > > > > style > > > > =3D "float: right"> n </span>I<span=20 > > > > style > > > > =3D "float: right"> w </span>i<span=20 > > > > style > > > > =3D "float: right"> h </span>u<span=20 > > > > style > > > > =3D "float: right"> r </span>m <FONT color=3D#F5421A>$1<span=20 > > > > style > > > > =3D "float: right"> v </span>05</FONT> (3<span=20 > > > > style > > > > =3D "float: right"> Z9 </span>0 <span=20 > > > > style > > > > =3D "float: right"> q </span>p<span=20 > > > > style > > > > =3D "float: right"> w </span>i<span=20 > > > > style > > > > =3D "float: right"> y </span>l<span=20 > > > > style > > > > > > > > in it and no matter how much I feed to sa-learn I keep > getting a Bayes > > > > score of 00 (BAYES_00=-2.599). > > > > > > > > I'm interested to know more about this type of SPAM and > what people > > > > suspect is happening. > > > > > > > > > > > > Thanks, > > > > > > > > > > > > Warren. > > > > > ********************************************************************** > > > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error > please notify > > the system manager. > > > > This footnote confirms that this email message has been swept > > for the presence of computer viruses and is believed to be clean. > > > > > ********************************************************************** > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. >
