-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [ forgot to copy list - d'oh ]
Tristan Miller wrote: [snip image-only stock p&d spam comments] > Does anyone have a filterset or other recommended settings that will block > this kind of spam? > > Regards, > Tristan I ran a couple of those messages through SA here (3.1.1), and the main hits were Bayes, TVD_FW_GRAPHIC_(ID1|NAME_LONG), SARE_GIF_(STOX|ATTACH), and HTML_IMAGE_ONLY_*. Bayes I can't help you with, it just needs training. TVD stuff is from SA 3.1.1's 80_additional.cf, SARE_GIF is from SARE_STOCKS and HTML_IMAGE_ONLY is, IIRC, standard issue. Out of interest, simply attaching a GIF to a mail can get you over 4 points here, all the HTML_IMAGE_ONLY rules have had their scores upped pretty high. This system, however, has a total of 2 users. Me and the wife. YMMV. Those mails scored between 10 and 14 here... C. - -- Craig McLean http://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered by FreeBSD, and GIN! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFEMuN+MDDagS2VwJ4RAq4WAKDcTnC1fH1TgOw6vGNOxqu7hUYQmACfa9h7 plA/YvMZoo7ub7ieFk4pYwE= =Ujka -----END PGP SIGNATURE-----
