On Wed, 8 Jan 2014, Christopher Culver wrote:
For the last year or so, I’ve been deluged with Spanish-language spam
with a very predictable format: the sender name begins with "Lic. " and
the sender address is at an .info domain.
I've been having good results with such a rule in my local install.
Unfortunately it seems not too many others are getting the same spams, as
it isn't doing too well in masscheck:
http://ruleqa.spamassassin.org/?daterev=20140107-r1556147-n&rule=%2F_LIC
You're welcome to pull the rules directly from my sandbox if you like, or
I could see about forcing publication. How are those spams scoring absent
such a rule?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Of the twenty-two civilizations that have appeared in history,
nineteen of them collapsed when they reached the moral state the
United States is in now. -- Arnold Toynbee
-----------------------------------------------------------------------
9 days until Benjamin Franklin's 308th Birthday
