Daryl C. W. O'Shea wrote:
> Kenneth Porter wrote:
>> I noticed today an unusually high incidence of spam subject lines of
>> "Re: Hi", and I don't see a rule for this in the distribution. Do
>> others see this much in legitimate mail? Or could it make a good rule?
>
> I see enough legit mail with such a subject go through my systems that
> would make the rule useless, at least for my users.
True, the subject is a bad idea, but the contents is pretty consistent,
most have something like "Vragra" in large type, a link and some random
text fragment at the end ...
Some of the "Hi"-mails are already tagged by our filter (I'd say
somewhere beyond 80%), though some still get through untagged:
HTML_MESSAGE 0.00, URIBL_SBL 1.09, URIBL_WS_SURBL 1.53)
HTML_MESSAGE 0.00, RCVD_IN_BL_SPAMCOP_NET 1.33, URIBL_SBL 1.09,
URIBL_WS_SURBL 1.53)
HTML_MESSAGE 0.00, RCVD_IN_BL_SPAMCOP_NET 1.33, URIBL_SBL 1.09,
URIBL_WS_SURBL 1.53)
Wonder if there's an update to the rules-emporium config "mangled" some
time soon !?
-gg
