Hi Ken,
please keep the discussion on the list, instead of mailing me
directly, so maybe someone
else can learn something from this in the future.
Anyway:
The EXTRA_MPART_TYPE rule is a native SA rule (in SA 3.1 at least;
don't know if this is true for pre-3.1 versions)
The MY_CID_* rules are part of 70_sare_stocks.cf
You should check out this recent thread from the SA list: http://
www.nabble.com/rules_du_jour-question-tf2533374.html#a7062324
I''ve posted some comments on my setup there.
Here's another suggestion/tip/request: please don't start new threads
on mailing lists
by replying to other threads. It will b0rk email clients with thread
support, as
well as web-based mailing list archives, as you can see on the link
above...
Leander
On 31-okt-2006, at 0:00, User for SpamAssassin Mail List wrote:
Leander,
I reconize most but I do not know what rule EXTRA_MPART_TYPE and
MY_CID_... are part of. Could you please pass that along.
Below are a list of rules I'm running, maybe you could pass along a
little
info something good I should be running....
Thanks,
Ken
70_sare_adult.cf
70_sare_bayes_poison_nxm.cf
70_sare_evilnum0.cf
70_sare_genlsubj0.cf
70_sare_header0.cf
70_sare_html0.cf
70_sare_obfu0.cf
70_sare_oem.cf
70_sare_random.cf
70_sare_specific.cf
70_sare_spoof.cf
70_sare_stocks.cf
70_sare_unsub.cf
70_sare_uri0.cf
70_sare_whitelist.cf
72_sare_bml_post25x.cf
72_sare_redirect_post3.0.0.cf
99_sare_fraud_post25x.cf
chickenpox.cf
tripwire.cf
On Mon, 30 Oct 2006, Leander Koornneef wrote:
Those kinds op spam are hitting all kinds of rules here, including
rulesets from SARE:
X-Spam-Status: Yes, hits=14.1 tagged_above=-999.0 required=3.0
tests=BAYES_99, EXTRA_MPART_TYPE, HTML_10_20, HTML_MESSAGE,
MY_CID_AND_ARIAL2, MY_CID_AND_CLOSING, MY_CID_AND_STYLE,
MY_CID_ARIAL2_CLOSING, MY_CID_ARIAL_STYLE, SARE_GIF_ATTACH,
TVD_FW_GRAPHIC_ID1
I suspect you haven't done much tweaking on your SA setup?
Leander
On 30-okt-2006, at 21:45, User for SpamAssassin Mail List wrote:
Has anyone come up with a rule that will combat the spam that I
have been
seeing lately?
That is a spam that rambles about much of nothing then has an image
or a
link at the bottom.
I see more and more of these and it seems like the spammers have
figured
out a way to get this past SA.
I include one such message at the end of this post.
Thanks,
Ken
Example of this spam:
[IMAGE]
Jeg er udvalgt som blogger, dvs. There is little doubt that
asynchronous
solutions require us to think in new ways as we have to deal with
concurrency, out-of-sequence issues, correlation and other. Ingen
interesse mere. But it makes me feel better that Ted Neward seems
to beat
me in that category, though. In my eyes this is really the best
indicator
of success for a pattern language. We don't have to go further than
the
local coffee shop. But it makes me feel better that Ted Neward
seems to
beat me in that category, though. While the conference logistics
can be
quirky at times the content is top notch. Even if you choose the
"right"
specification, it still is likely to evolve over time. Jeg er
udvalgt som
blogger, dvs. However, when building distributed applications, that
asymmetry really has no place. After "loosely coupled", "stateless"
must
be a close runner-up as the ultimate nirvana in buzzword-compliant
architectures. While Java is not necessarily the greatest
language to
"host" a DSL we can go a lot further than developers generally
believe or
care for. Ideally, the debate would involve alcoholic beverages and
the
other person would pick up the check. This time, though, Ken Arnold
stole
a little bit of my show by publishing an excellent article in ACM
Queue
magazine called "Programmers are People, too". During the proverbial
hallway discussions we started talking about boxes and lines, but
in a
profound way. Read on to learn more about the implementation and our
experiences with intra-JVM EDA. Hearing this tag line for the
third or
fourth time got me wondering, "what really is the difference between
coding and configuring? For one thing, a fair number of my
intellectual
drinking buddies tend to congregate around the large software
company in
the Pacific Northwest. First, because I was going to meet the
exalted one
in person.
--
Leander Koornneef
IC&S B.V.
Stadhouderslaan 57
3583 JD Utrecht
T: +31 30 63 55 730
F: +31 30 63 55 731
E: [EMAIL PROTECTED]
I: http://www.ic-s.nl
IC&S biedt Service & Support, Development en Consultancy op
uiteenlopende
internet-gerelateerde platformen, met een voorliefde voor Open Source.
Let op: mijn emailadres is gewijzigd naar: [EMAIL PROTECTED]
