Is there such a rule? Can I write one (I consider myself a bit of a Perl
wonk)?
I understand that there are few, if any, markers that definitively define
spam; and that's the beauty of the SpamAssassin architecture.
-Jim
On Wed, 15 Aug 2012, Kevin A. McGrail wrote:
On 8/15/2012 11:06 AM, Jim Schueler wrote:
Upon Kevin's recommendation, I upgraded. Big difference.
'Though there's a bit of a retuning penalty.
Woohoo, I was right! All I did was flip a coin, though ;-)
I get quite a few authorize.net notifications on behalf of
various ecommerce clients, and this morning I started seeing
scam/spam similar to the attached. All share a common marker of
embedding a text url within an HTML <a> tag containing a
different URL. This seems like an obvious marker for spam, I
wonder why there isn't a rule for it.
There are many patterns that show up in spam that unfortunately show up in
ham as well. If my memory serves me correctly, this just is indicative of
spam or ham.
HOWEVER, some mail systems with good glue like MIMEDefang can do things like
disable links that do this or redirect them to a CGI that gives the end-user
some warning, etc.
Regards,
KAM