Re: rule to catch subject spamming

2010-10-24 Thread Lawrence @ Rogers
On 23/10/2010 5:47 PM, RW wrote: On Sat, 23 Oct 2010 14:28:38 -0230 Lawrence @ Rogerslawrencewilli...@nl.rogers.com wrote: Hello all, I noticed recently that our users are getting spam with the subject similar to the following:

Re: rule to catch subject spamming

2010-10-24 Thread Karsten Bräckelmann
On Sun, 2010-10-24 at 16:05 -0230, Lawrence @ Rogers wrote: I have settled on the following as it's more specific and less prone to FPs (I can't think of any possibilities right now) header __LOCAL_SUBJECT_SPAMMY Subject =~ /^[0-9a-zA-Z,.+]{42,}$/ meta LOCAL_SUBJECT_SPAMMY1

Re: rule to catch subject spamming

2010-10-24 Thread Karsten Bräckelmann
On Sun, 2010-10-24 at 22:08 +0200, Karsten Bräckelmann wrote: On Sun, 2010-10-24 at 16:05 -0230, Lawrence @ Rogers wrote: I have settled on the following as it's more specific and less prone to FPs (I can't think of any possibilities right now) header __LOCAL_SUBJECT_SPAMMY Subject =~

rule to catch subject spamming

2010-10-23 Thread Lawrence @ Rogers
Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet SpamAssassin seems to be having a hard time determining whether it is spam or not because it appears as one long

Re: rule to catch subject spamming

2010-10-23 Thread Lawrence @ Rogers
On 23/10/2010 2:28 PM, Lawrence @ Rogers wrote: Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet SpamAssassin seems to be having a hard time determining whether it

Re: rule to catch subject spamming

2010-10-23 Thread Karsten Bräckelmann
On Sat, 2010-10-23 at 15:36 -0230, Lawrence @ Rogers wrote: On 23/10/2010 2:28 PM, Lawrence @ Rogers wrote: In all cases, the subject contains no spaces (to prevent detection I would think) and is longer than 62 characters (not sure why they do this, but it is true in every sample I've

Re: rule to catch subject spamming

2010-10-23 Thread RW
On Sat, 23 Oct 2010 14:28:38 -0230 Lawrence @ Rogers lawrencewilli...@nl.rogers.com wrote: Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet I got some of these