On Tuesday March 21 2006 10:37 am, Iain Smith wrote: > Payal Rathod wrote: > > Hi, > > To my various email addresses I am getting lot of "Re: news" spam. > > SA is not catching all of it. I have pasted a links of headers and body > > at, http://pastebin.ca/46477 > > Can someone advise on it please? > > With warm regards, > > -Payal > > Bayes has been catching these here, but in some cases the only other rule > to fire has been HTML_MESSAGE. I've managed to largely mitigate this with a > custom meta rule that combines BAYES_99 and a custom subject rule: > > header __LOCAL_NEWS_IN_SUBJ Subject =~ /re:.*news/i > meta LOCAL_BAYES99_NEWS_SPAM (__LOCAL_NEWS_IN_SUBJ && BAYES_99) > score LOCAL_BAYES99_NEWS_SPAM 2.0 > > You perhaps could expand it to other BAYES_x rules, depending on how brave > you are feeling...YMMV. :-) > > Iain
As I said, and Iain confirmed Phil's rule does help with this spam. But, I don't understand (and really, I'm no expert) why some obfu rule isn't being hit. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
