Hello,

(new to this list, so please notify me if this has already been
discussed or should be posted elsewhere. I've checked the mailing list
archives but didn't find anything.)

I've been quite satisfied with SpamAssassin so far (first 2.53, now
2.61). It's blocking a modest 100 spam mails a weak, I've had no false
positive and relatively few false negatives.  Recentely, I've been
getting a new kind of spam that gets through more often than not,
though: email with a subject line like the speach in the star trek
episode "Darmok", where captain Picard is alone on a planet with a man
who talks like

Kiteo, his eyes closed.
Mirab, his sails unfurled!
Kailash!  When it rises. 
Sokath, his eyes uncovered!

It may be a coincidence, but all these emails have a subject like
that. The body of the mail is just a random collection of words, about
4 lines long. Some examples:

Re: FQCDW, thousand years waiting
Re: YAS, here the investigator
Re: SAHQSC, of the gift
Re: IN, that you learne
Re: WJKCPV, breaking to pieces

Have others encountered this? Has a rule already been written to
recognize this subject pattern? Is it worth it? I'd like to try it,
and probably will, but any pointers are welcome as I've not written
rules myself before.

Hein Zelle

>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-< 
 Unix is user friendly. It's just very particular about who 
 it's friends are.

 Hein Zelle                     [EMAIL PROTECTED]
                                http://www.icce.rug.nl/~hein
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to