On Wed, 27 Aug 2008, Skip wrote:
Scored well here:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10)
X-Spam-Level: xxxxxxxxxxxxxxxxx
X-Spam-Status: Reqd:5.0 Hits:17.1 Learn:disabled Tests:JM_SOUGHT_2=4,
JM_SOUGHT_3=4,SG_EXECUTABLE_URI=3,UNPARSEABLE_RELAY=0.001,
URIBL_AB_SURBL=1.613,URIBL_BLACK=1.961,URIBL_SC_SURBL=2.523
-d
Yesterday when I received the message, it didn't trigger the SC SURBL, but it
does today for me too. I know sometimes it can take them a while to catch up
to the spammers.
Tell me, where did you get the SG_EXECUTABLE_URI rule? I don't have it in my
installation.
http://www.google.com/search?num=100&hl=en&safe=off&q=SG_EXECUTABLE_URI&btnG=Search
returns 0 hits.
It was a rule that was posted to the list close to a week ago by Phil
Randal (thread subject: e greeting exe link). I just changed its name:
<ORIGINAL_RULE>
uri MY_EXECUTABLE_URI
/^(?:https?|ftp):\/\/[^\s?]{1,80}\/[^\s?]{1,80}\.(?:exe|scr|dll|pif|vbs|wsh|cmd|bat)$/i
describe MY_EXECUTABLE_URI Links to an executable file
score MY_EXECUTABLE_URI 3.00
</ORIGINAL_RULE>
-d
