Kenneth Porter wrote:
> I'm seeing a lot of these today, and Bayes seems to be letting a lot
> of them leak through. Any good rule for stopping them? The links are
> always to a Geocities page.
>
Do you have network checks enabled? I just grabbed one and it seemed to
hit XBL, SpamCop and Razor2 pretty nicely:

Content analysis details:   (7.5 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [137.132.31.162 listed in zen.spamhaus.org]
 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see
<http://www.spamcop.net/bl.shtml?137.132.31.162>]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]

Reply via email to