> Anyone know of any good rule-sets to block this sort of spam? > > http://www.unchartedbackwaters.co.uk/files/russian_spam.txt > I get 17 points on that one. And looked the ip up manually on xbl and it is there because its on cbl:
http://cbl.abuseat.org/lookup.cgi?ip=84.16.105.146 pts rule name description ---- ---------------------- -------------------------------------------------- 3.3 TVD_RCVD_IP4 TVD_RCVD_IP4 1.6 TVD_RCVD_IP TVD_RCVD_IP 3.2 CHARSET_FARAWAY_HEADER A foreign language charset used in headers 2.8 UNWANTED_LANGUAGE_BODY BODY: Message written in an undesired language 3.2 CHARSET_FARAWAY BODY: Character set indicates a foreign language 2.5 MIME_CHARSET_FARAWAY MIME character set indicates foreign language -- Michael Scheidell, CTO >|SECNAP Network Security Winner 2008 Network Products Guide Hot Companies FreeBSD SpamAssassin Ports maintainer _________________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ _________________________________________________________________________
