On Mon, 2010-04-26 at 20:37 -0400, Alex wrote:
> Hi,
>
> I'm seeing an increase in zip attachment spam, and hoped someone could
> help me figure out why it isn't being properly tagged. Are others
> seeing this? Is BAYES_99 being triggered or is it lower?
>
> Here's an example:
>
> http://pastebin.com/h9JwTQ9T
>
> The score is very low. Does someone have an idea of other
> characteristics that I can flag on?
>
> Thanks!
> Alex
Hits for me on this:
Sanesecurity.Junk.22048.UNOFFICIAL FOUND
But how long that has bitten it I can't say. Other than that it's not
doing well:
pts rule name description
---- ----------------------
--------------------------------------------------
9.0 RELAYCOUNTRY_FR Relayed through France
5.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?80.14.188.63>]
