Ramprasad wrote:
Hi,
My servers are suddenly facing a deluge of university spams. All that
"get gen uine de grees from pr estigious univers ities" type
These mails have no urls or email addresses, just some phone numbers to
call back. And the spammers are using some virgin routes , so they dont
hit the RCVD_IN_* rules too
I've been seeing them too, but they're all being caught. The main rules
that they seem to hit are Bayes, Razor, SARE_SPEC_DIPLOMA and
TVD_FUZZY_DEGREE BODY (which I think is one of the rules you get by
running sa-update).
So my recommendations would be (assuming you haven't done these already):
Run sa-update
Turn on Razor2 and Bayes
Grab the sare_specific ruleset
Run sa-learn on the messages.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
