New image spams

2009-12-07 Thread Chris Owen

Well I'm not sure about new but the image spam seems to be back on again 
after a long absence:

http://pastebin.com/d6d840f09

Same issues/filtering techniques as before.

These do seem to be doing a pretty good job of clobbering Bayes filtering 
though.

Chris

-
Chris Owen - Garden City (620) 275-1900 -  Lottery (noun):
President  - Wichita (316) 858-3000 -A stupidity tax
Hubris Communications Inc  www.hubris.net
-





Re: New image spams

2009-12-07 Thread Alex
Hi,

 Well I'm not sure about new but the image spam seems to be back on again 
 after a long absence:

 http://pastebin.com/d6d840f09

Yes, a few here too. Can you explain your rules? I haven't seen some
of these before:

X-Spam-Status: No, score=5.0 required=6.0 tests=BAYES_50,
DYN_RDNS_AND_INLINE_IMAGE,HC_U7KFR6ZI4F_ZYNT_16Y,RCVD_IN_APEWS,
RCVD_IN_PBL,RCVD_IN_SORBS_HTTP,RDNS_DYNAMIC autolearn=no

Do you have enough to look for uniqueness in the headers?

Why is your score 6.0?

Thanks,
Alex


Re: New image spams

2009-12-07 Thread Chris Owen
On Dec 7, 2009, at 11:37 AM, Alex wrote:

 Yes, a few here too. Can you explain your rules?

Nothing magical but I'll send you a response offlist.

 Why is your score 6.0?

Not my score.  It is a customer's score.  They can set them at anything they 
want (well anything 3 and above).

Chris

-
Chris Owen - Garden City (620) 275-1900 -  Lottery (noun):
President  - Wichita (316) 858-3000 -A stupidity tax
Hubris Communications Inc  www.hubris.net
-






New image spams

2009-08-13 Thread Chris Owen


I'm sure I'm not the first to see them but I hadn't seen a post here.   
The pharma image spams are back after a long break:


http://pastebin.com/mb1876f6

Like the others they are fairly easily blocked but just thought I'd  
pass on what I'd seen.


Chris

-
Chris Owen - Garden City (620) 275-1900 -  Lottery (noun):
President  - Wichita (316) 858-3000 -A stupidity tax
Hubris Communications Inc  www.hubris.net
-





Re: New image spams

2009-08-13 Thread RW
On Thu, 13 Aug 2009 11:38:19 -0500
Chris Owen ow...@hubris.net wrote:

 
 I'm sure I'm not the first to see them but I hadn't seen a post
 here. The pharma image spams are back after a long break:
 
 http://pastebin.com/mb1876f6
 
 Like the others they are fairly easily blocked but just thought I'd  
 pass on what I'd seen.

Unlike the last batch, this scored nothing on FuzzyOCR.