Owen Mehegan <[EMAIL PROTECTED]> wrote on
07/17/2006 05:20:44 PM:
> I've been inundated with maddening image-only stock spam lately.
> I've just today sat down to try and tweak my rules up to weed this
> out. I added sare_stocks and sare_obfu, updated my version of rules
> du jour for good mea
Loren Wilton wrote:
> > I've attached the one that just got through. spamassassin -t
> > reports the following for it:
> >
> > 0.8 EXTRA_MPART_TYPE Header has extraneous
> > Content-type:...type= entry
> > 2.9 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
> >
I've attached the one that just got through. spamassassin -t reports the
following for it:
0.8 EXTRA_MPART_TYPE Header has extraneous Content-type:...type=
entry
2.9 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
1.3 RCVD_NUMERIC_HELO
On Mon, Jul 17, 2006 at 06:20:44PM -0400, Owen Mehegan wrote:
> The highest scores are for the HELO? We've got to be able to do better than
> that... what am I missing?
sa-update? with just local rules:
[19640] dbg: check: is spam? score=16.082 required=5
[19640] dbg: check:
tests=BAYES_99,EXTR
