Somebody scribbled about [expert] Frickin spam and spamassassin
>These are tricky html or other type of spam, they are plain text. 
> Generally they are viagra messages.  The one that really galls me is
> one that uses the name "[EMAIL PROTECTED]" or "[EMAIL PROTECTED]" instead of the 
> actual

It is getting ever more popular to obfuscate the filters. Spammers might 
just have woken up to the fact that most of their mail is getting killed 
by filters. The majority of spam I am seeing now have various 
obfuscations - such as using high ASCII characters, accent marks, 
periods, odd punctuation in the subject and that sort of thing.

Bodies are even more stranger. I've seen spam where the only legible item 
in the body was the link, buried in the middle of the spam, and the whole 
rest of the message looks like:

;weafl;ewjkajeiajwe;ia
gjaegjk
aefjajj fjkl;weaj;ejklaefj;aejaf
j; wekla;fjkaje4iajajkef 
           wejlfj;efaj http://gogetcash.com 
aef;aljkajkljl;kwefjl;ka

like that :).

> minutes later that damn message is back and spamassassin let it come
> right through.

Would the scores be raised by "learned" spam? Oftentimes one sees a lot of
spam that you know is definitely spam but there's not sufficient checks 
that would raise the score and put it into the bucket. Since Spam 
Assassin looks at specific things for scoring, it may be that the spam in 
question didn't trigger a specific "nono" that SA is looking for.

>What the hell?  I REALLY want to nuke the computer from which this
> comes.  I was doing so well there with nary a spam for weeks getting

I started that approach sometime back but ran into trouble getting it to 
work in postfix (per host type refusals). Sooner or later I will try to 
get it working again. 


>praedor

-- 
------------------------------------------------------------------------
David E. Fox                              Thanks for letting me
[EMAIL PROTECTED]                            change magnetic patterns
[EMAIL PROTECTED]               on your hard disk.
-----------------------------------------------------------------------


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to