On Wed, 4 Feb 2004, Loren Wilton wrote:
> I just got a spam that was caught by a couple of my local and very specific
> rules, but otherwise would have made it through with flying colors. Yet it
> has some really obvious screwups that I would have expected some rule to
> catch. Notice:
>
> Subject: FWD: Got all meds 4 U. %RND_MEDS_4PILLS & %RND_MEDS_2PILLS eJTtq
>
> Aside from the suspicious FWD in uppercase, note the %RND_xxx tags.
>
> In the body:
>
> We ship the following: %RND_MEDS_LIST
> <p>
> Plus: %RND_ALL_OTHER_MEDS
> <p>
>
> Again, my favorite %RND_xxx tags.
>
> Shouldn't there already be a rule to catch this sort of thing?
http://www.stearns.org/sa-blacklist/random.current.cf
Cheers,
- Bill
---------------------------------------------------------------------------
"We don't want an election without a paper trail...all three
owners of the companies who make these machines are donors to the Bush
administration. Is this not corruption?"
-- Gore Vidal
(Courtesy of http://www.laweekly.com/ink/03/52/features-cooper.php)
--------------------------------------------------------------------------
William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, freedups, p0f,
rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org
--------------------------------------------------------------------------
