It looks like 7.0 is enough to get them tagged as spam.  If you want
to get them higher (e.g., so that Amavis or something will discard
them), crank up the scores on RAZOR2_CHECK and URIBL_*.  I've found
both to be very reliable with exceedingly few FPs.

Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University

On Mon, 22 Jan 2007, Evan Platt wrote:

Any rules to get those (I call them) bad spelling spams to score higher?

An example of one is at http://www.espphotography.com/spellingspam.txt .

Basically, you have to read every other letter in the subject for it to make sense, ie

TELENS Tfeen Gdives ....

They score a 7.0 on my system:

Content analysis details:   (7.0 points, 5.0 required)

pts rule name              description
---- ---------------------- --------------------------------------------------
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 3.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: ifoladiz.com]
 1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: ifoladiz.com]

Any input?

Thanks.

(Running SpamAssassin 3.1.7).



Reply via email to