Am 21.07.2015 um 21:58 schrieb Reindl Harald:

Am 21.07.2015 um 21:50 schrieb Bowie Bailey:
I am getting a bunch of spam that is hitting almost nothing except Bayes
and occasionally DCC.  I can't seem to find any kind of pattern to key
on.   The IP addresses, From addresses, Subject lines, URLs, etc are all
different.  The URLS look normal and are generally .com domains.  I'm
getting 20-30 per day on several of my email addresses.

Subjects are things like arthritis, cancer, medical alarms, tooth
whitening, vacation planning, A/C systems, etc.

Anyone else seeing this?

yes, hence i wrote some months ago a webinterface for subject filters

* starts with
* ends with
* contains
* is equal

* very low severity (0.5 points)
* low severity (1.5 points)
* medium severity (2.5 points)
* high severity (3.5 points)
* very high severity (4.5 points)

the cron-script generating "local.cf" builds blocks like below and in
the meantime the same was implemented for body filters

# Body Begins Medium
body      CUST_BODY_8     /^(dear boss|god bless you|hi my dear beloved
one good day|my beloved in god).*/i
score     CUST_BODY_8     2.5
describe  CUST_BODY_8     Begins Medium

uhm - that above was a body filter from the same logic
that's a sample for subjects

# Subject Ends Very Low
header    __CUST_SUBJ_11  Subject =~ /.*(not\s+spam\.)$/i
meta      CUST_SUBJ_11    (__HAS_SUBJECT && __CUST_SUBJ_11)
score     CUST_SUBJ_11    0.5
describe  CUST_SUBJ_11    Ends Very Low

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to