> Hopefully at some point Declude will post a list of good examples on
> their web site.
I hope people aren't ignoring the ridiculously profuse SpamAssassin
Rules Emporium, SA built-in rules, etc.
--Sandy
Sanford Whiteman, Chief Technologist
Broadleaf Sys
Here are some web pages you might check out:
http://www.cecilw.com/eudora/regexp.htm
http://www.adamlyon.com/spam/spam_filter_regex.html
http://www.adamlyon.com/spam/afo.txt
http://trac.edgewall.org/wiki/BadContent
http://www.regexlib.com/
Hopefully at some point Declude will post a list of g
Would anyone be willing to share their regular expressions files (lines)
with the group?
I know this will be a valuable addition to Declude but most of us don't
want to (or know how to) re-invent the wheel.
Thanks.
--
John Olden - Technology Manager
Champaign Park District
---
This E-mail came
Many thanks.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Friday, March 16, 2007 11:02 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Bounce / Spoof Analysis Help Please
You're safe, Robert.
I've seen this pa
You're safe, Robert.
I've seen this part in spam sent to my domain for about a year:
> Received: from 208.100.26.91 (HELO smtp.igive.com)
> by hoffman.army.mil with esmtp (9(A'R/,ZVN :36=Q+)
> id JLM3A5-)G'4.A-M/
The gibberish in the received block is a definite "spam signature" and
is
Hi
We're seeing bounce messages similar to the following. I don't think our
server has been compromised, but I want to be sure. We legitimately send
mail from 208.100.26.91, but I think (hope) its appearance in the following
is spoofed.
==
Don you could do this:
BODY5 CONTAINS Cialis
The is just to show you that there is a space there, do NOT use
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don
Brown
Sent: Thursday, March 15, 2007 9:28 PM
To: declude.junkmail@declude
