RE: Porn E-Mail

2005-03-01 Thread Gary W. Smith
No really as it was marked at spam to being with. It only scored 9.1 because of AWL... * -20 AWL AWL: From: address is in the auto white-list Are you trying to skew my bayes or something :). Gary > -Original Message- > From: Matt [mailto:[EMAIL PROTECTED] > Sent: Monday, February 28,

RE: Porn E-Mail

2005-02-28 Thread Chris Santerre
Ditto on this as well. New rules coming out for those. Funny, but the ninjas are excited we get to work on some spam again ;)  We get bored without someone to assassinate.   --Chris -Original Message-From: Arie Kachler [mailto:[EMAIL PROTECTED]Sent: Monday, February 28, 2005

Re: Porn E-Mail

2005-02-28 Thread Arie Kachler
We are getting a ridiculous amount of spam related to cheap stocks lately. Spam has definitely increased recently. Some customers are calling us asking if we have spam filters, even though our Spamassassin is blocking about 90-95% of all emails coming to our servers. I remember the days when we

Re: Porn E-Mail

2005-02-28 Thread Matt
As just an aside.. has anyone noticed a more massive amount of spam lately then normal? Seems in gmail as well as my ISP I am logging a whole lot more spam then normal. On Mon, 28 Feb 2005 14:10:16 -0500, Chris Santerre <[EMAIL PROTECTED]> wrote: > > >Has anyone noticed lately a higher then nor

RE: Porn E-Mail

2005-02-28 Thread Chris Santerre
>Has anyone noticed lately a higher then normal amount of porn spam >getting through?I've seen alot of it that seems to be hitting the >customer base as of late.. marked only by the SURBL... but those that >aren't SURBLed yet.. get through with a score of like 2.3 > Yup. New SARE rule coming

Re: Porn E-Mail

2005-02-28 Thread Matt
Hrmm well that could do it: pts rule name description -- -- 1.3 SARE_HOUSEWIVESBODY: Mentions housewives, as in porn or in-home biz 0.8 HTML_30_40 BODY: Message is 30% to 40% HTML 0.0 HTML

Re: Porn E-Mail

2005-02-28 Thread Kevin Peuhkurinen
Matt wrote: Hrmm well that could do it: pts rule name description -- -- 1.3 SARE_HOUSEWIVESBODY: Mentions housewives, as in porn or in-home biz 0.8 HTML_30_40 BODY: Message is 30% to 40% HTML 0

RE: Porn E-Mail

2005-02-28 Thread Shawn R. Beairsto
If you are running the 70_SARE_HTML1.CF file, increase the value of SARE_HTML_A_HIDE in your local.cf... this spammer always hits this rule. I've been doing this for several months now, with no false positives. I've set mine to 3 points (5 required). HTH, Shawn -Original Message- From

Re: Porn E-Mail

2005-02-28 Thread Kevin Peuhkurinen
This hits 22 points on my install. If you ignore all of the BLs and Razor, it's still getting over 5 hits. Of course, if you ignore Bayes, then it's down to about 2 points.Which rules did this hit on your install? The headers don't say. Content analysis details: (22.2 points, 5.0 req