Simon wrote:
I was getting these spam emails with the subject "Name wrote:", so
someone suggested i update SA and run sa-update. Which i have and its
now solved that issue - nice.
But now im getting subject "hi it's Name", does someone have a custom
ruleset for this spam please?
This is why I stopped writing rules to check the subjects after the
first two variations. Given that it's so easy for a spammer to generate
a completely random subject, I've come to the conclusion that they're
just trying to tweak us with these oh-so-easy-to block series... after
which they switch to another temptingly easy to catch subject, making
the old rules useless.
They're trying to get us to waste our time running after the shiny decoy
instead of catching the real similarities.
A better solution, IMO:
1. Run sa-update (you've done this already).
2. Install the 70_sare_stocks.cf ruleset from www.rulesemporium.com.
3. Turn on Bayes if you aren't using it.
4. Run a bunch of these @#&*^!ers through sa-learn. <====
Optional bonus round:
5. Kick up the score for BAYES_99 a little bit.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
