I'm seeing a lot of these spammed to my Mailman mailing lists. They
generally consist of a single line with an obfuscated URL and a couple of
blank lines. The URL looks like "abcde . com" (ie. a space on either side
of the dot).
Does anyone have a rule to score these? I don't have Bayes at the
I'm seeing a lot of these spammed to my Mailman mailing lists. They
generally consist of a single line with an obfuscated URL and a couple of
blank lines. The URL looks like "abcde . com" (ie. a space on either side
of the dot).
If you post one or two somewhere I can write you a simple rule.
--On Friday, November 23, 2007 9:57 PM -0800 Loren Wilton
<[EMAIL PROTECTED]> wrote:
If you post one or two somewhere I can write you a simple rule. I could
write something from just what you described, but I'd be real concerned
about the FP rate. If I see a couple messages I can probably do
Oh, you weren't exaggerating about the amount of text in those! That makes
it pretty easy in theory. Let's try this (untested):
header __THE_BAT X-Mailer /^The Bat/
body__BROKEN_LINK/^[\w\.\-]{1,25}\s\.com\s*$/
meta SMALL_MIND__THE_BAT && __BROKEN_LINK
score SMALL_MIND3.5
I th
--On Friday, November 23, 2007 10:27 PM -0800 Loren Wilton
<[EMAIL PROTECTED]> wrote:
header __THE_BAT X-Mailer /^The Bat/
body__BROKEN_LINK/^[\w\.\-]{1,25}\s\.com\s*$/
meta SMALL_MIND__THE_BAT && __BROKEN_LINK
score SMALL_MIND3.5
Linting showed the header needs this:
header
Am 2007-11-23 21:57:13, schrieb Loren Wilton:
> >I'm seeing a lot of these spammed to my Mailman mailing lists. They
> >generally consist of a single line with an obfuscated URL and a couple of
> >blank lines. The URL looks like "abcde . com" (ie. a space on either side
> >of the dot).
>
> If y
