uri_block_cidr will still defeat this, at least until he’s forced to switch hosting providers.
On Aug 7, 2014, at 10:43 AM, Andy Balholm <a...@balholm.com> wrote: > This particular spammer just re-did the format of their emails, probably to > get around the rules that we’re working on. Do they read the > spamassassin-users list? (I can tell it’s the same spammer, since the return > address in Dundrum, Ireland, is the same as some of the earlier ones, and the > styling is similar.) > > Here’s their new format: http://pastebin.com/BpZ4RRJv > > It got a score of -0.7 on my box!