Kenneth Porter wrote: > I'm seeing a lot of these today, and Bayes seems to be letting a lot > of them leak through. Any good rule for stopping them? The links are > always to a Geocities page. > Do you have network checks enabled? I just grabbed one and it seemed to hit XBL, SpamCop and Razor2 pretty nicely:
Content analysis details: (7.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [137.132.31.162 listed in zen.spamhaus.org] 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?137.132.31.162>] 0.0 HTML_MESSAGE BODY: HTML included in message 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level above 50% [cf: 100] 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100]