Put scoring values for 'earn ....... degree' and/or 'degree' in one of your subject re's.
I'd turn off pbwhite bonus scoring.. that's rewarding someone for something they are supposed to do in the first place. it's always resulted in missed spam for me. Also didn't see ANY negative scores.. seems your filter needs some tweaking.. Bayesian should have caught that... On Aug 21, 2010, at 10:42 AM, bytehd wrote: > > Do i need a special regex for this? > > I have spam that makes it through all the ASSP blocking methods. > Diff IP address, subject is clean, usually 5-10 words. > No body whatsoever. > > > Customer is cursing ASSP because he gets several hundred per day. > > Any suggestions. > I can forward examples.... > > Here is example: > > Microsoft Mail Internet Headers Version 2.0 > Received: from djeb154.tectag.net ([192.168.0.249]) by mail.domain.com with > Microsoft SMTPSVC(6.0.3790.4675); > Sat, 21 Aug 2010 10:28:06 -0400 > Received: from djeb154.tectag.net ([66.225.241.154] helo=djeb154.tectag.net) > with IPv4:25 by ASSP; 21 Aug 2010 10:28:07 -0400 > DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=tectag.net; > > h=Subject:From:Date:Mime-Version:To:Message-ID:Content-Type:Content-Transfer-Encoding; > [email protected]; > bh=AU19bedb6p9eFTLIyj/vS/g+dFk=; > > b=IA+V4aLtXGb1tO04IYQseYEr0fdNVYIXML2/qM2Jmv/oIq78u7PEObwID6qmgzANEsnG6RMQ9q3F > > lgqypHRPjo7QDHbfYr8JV0ej1H5qxvzySEib+IZlhUkv9U60KhitPDlzj7zZECBFho7P2iVWvI/5 > OYSqi5RAL7NkUHpAlb8= > DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=tectag.net; > > b=SLbA2dIpYF6vOLOXTtKadNn84yDnl98loyuUQHdRnf3PJY7wCNMB5HZNk7yQh+dJQ5mkqJFA3DIb > > 9PN4v5nzsazBp1NCpyoK8Ng0Kfjd4tonsHFi2Ktwpzb5/Xd0gp2I94m6MvzQvrChapY+PMr7yGGM > u3+tIIIF44NlXw//1f0=; > Subject: Earn an accounting degree > From: "Niki" <[email protected]> > Date: Sat, 21 Aug 2010 07:26:09 -0700 > Mime-Version: 1.0 > To: <[email protected]> > Message-ID: <[email protected]> > Content-Type: text/html; charset=us-ascii > Content-Transfer-Encoding: 8bit > Content-Disposition: inline > X-Assp-Score: -10 (PBwhite) > X-Assp-Score: -5 (SPF pass) > X-Assp-Envelope-From: [email protected] > X-Assp-Intended-For: [email protected] > X-Assp-ID: ASSP (id-00887-23716) > X-Assp-Version: 1.7.1.5(1.1.00) > Return-Path: [email protected] > X-OriginalArrivalTime: 21 Aug 2010 14:28:06.0817 (UTC) > FILETIME=[126D8910:01CB413D] > > > -- > View this message in context: > http://old.nabble.com/Image-spam-tp29499592p29499592.html > Sent from the assp-user mailing list archive at Nabble.com. > > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by > > Make an app they can't live without > Enter the BlackBerry Developer Challenge > http://p.sf.net/sfu/RIM-dev2dev > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user -Paul ------------------------------------------------------------------------------ This SF.net Dev2Dev email is sponsored by: Show off your parallel programming skills. Enter the Intel(R) Threading Challenge 2010. http://p.sf.net/sfu/intel-thread-sfd _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
