Thanks. BTW, I'm still confused about posting. If I hit reply to all, I get spamassassin-users in the CC and then sender in the To:
I then need to delete the sender in the To: and move the Cc: to the To: There must be a better way. Mark -----Original Message----- From: Scott [mailto:[EMAIL PROTECTED] Sent: Monday, February 09, 2004 2:37 PM Cc: [EMAIL PROTECTED] Subject: Re: How did this spam get by troutpocket.org:root# cat /etc/mail/spamassassin/local.cf # This is the right place to customize your installation of SpamAssassin. # # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # ######################################################################## ### # # rewrite_subject 0 # report_safe 1 # trusted_networks 212.17.35. body RANDOM_WORD_10 /(?:\b(?!(?:from|even|more|that|this|were|with)\b)[a-z]{4,12}\s+){10}/ describe RANDOM_WORD_10 string of 10+ random words score RANDOM_WORD_10 1.6 body RANDOM_WORD_15 /(?:\b(?!(?:from|even|more|that|this|were|with)\b)[a-z]{4,12}\s+){15}/ describe RANDOM_WORD_15 string of 15+ random words score RANDOM_WORD_15 3.8 There's an unintentional line-break there. body, describe, and score are the only three lines per rule. -Scott p.s. now I can see why the debate about this list was so heated. Someone has got to turn off the "include sender" option or add a subject header. It's annoying when replies go into two folders if the sender hits "reply-all" Mark A. DeMichele wrote: > Where to I get your rules from? Sorry, I'm new. > > -----Original Message----- > From: Scott [mailto:[EMAIL PROTECTED] > Sent: Monday, February 09, 2004 2:21 PM > Cc: [EMAIL PROTECTED] > Subject: Re: How did this spam get by > > My random_word_10 and random_word_15 give relatively huge scores, 1.6 > and 3.8 > respectively. That would have cought it for you. > > -Scott > > Mark A. DeMichele wrote: > > >>I have all the extra rule files from the Rule Emporium, but this one >>squeaked by. It has lots of garbage html tags. It only got a score of > > 2.2 > >>Thanks, >> >>Mark DeMichele >> >><<Get your home financing while the rates are low! -asset>> >> >> >> > ------------------------------------------------------------------------ > >>Subject: >>Get your home financing while the rates are low! -asset >>From: >>"Naomi Tracy" <[EMAIL PROTECTED]> >>Date: >>Mon, 9 Feb 2004 13:49:17 -0500 >>To: >>"Mark A. DeMichele" <[EMAIL PROTECTED]> >> >> >> >>We c <http://www.christoffel.info>an g > > <http://www.dispel.com/tg.html>et > >>yo <http://www.claim.net>u mo <http://www.ridge.net/index.html>rt >><http://www.scripps.us/index.htm>ga > > <http://www.doesn't.org/greg.php>ge > >>ra <http://www.vacationland.info>te > > <http://www.injunction.tv/loll.php>s > >>as l <http://www.sturbridge.info>ow as 5. <http://www.horace.ws>79%! >> >>The ra <http://www.e.net>tes are as lo > > <http://www.mukden.com/Ge.html>w > >>as th <http://www.lahore.info>ey ha <http://www.recriminatory.info>ve > > b > >><http://wwwchlorine.ca>een in 4 >><http://www.bassett.org/nevertheless.php>0 ye > > <http://www.velvety.org>ar > >><http://wwwdextrous.org>s! Do <http://www.ampere.kg>n't wa >><http://www.neuromuscular.info>it fo >><http://www.asia.ca/counterfeit/patriot/main.asp>r th >><http://www.cerberus.info>e ra <http://www.afoul.tv>tes to i >><http://www.abbott.com>ncre <http://www.paradigm.co.uk>ase.Yo >><http://www.movie.co.uk>u can sa <http://www.catkin.ca>ve th >><http://www.timon.tv>ou <http://www.caesar.tv/chivalry.php>sa >><http://www.knee.kg/ZY.html>nds by re >><http://www.terrific.tv/plagiarism.php>fin <http://www.send.org>anc >><http://www.acclaim.net/index.html>ing or ge <http://www.cubic.org>tti > > >><http://www.hooligan.com>ng a mor <http://www.royce.kg>tg >><http://www.babel.com>age NOW. >> >>Ab <http://www.bernini.kg>sol >><http://www.craftsmen.ws/docs/courteous.html>ute >><http://www.az.org/connector.php>ly No Ob >><http://www.conservatism.ws/docs/screech.html>li >><http://www.stick.com/YY.html>gat <http://www.core.com/ty.html>ion >> >>Si <http://www.martensite.co.uk>mp <http://www.t's.info>le ov >><http://www.semester.ws>er th <http://www.tycoon.ws>e p >><http://www.archdiocese.ca/excretory/paraboloid/main.asp>ho >><http://www.longish.tv/duopolist.php>ne con >><http://www.incredulous.ca>su > > <http://www.jubilant.org/amputate.php>ltat > >><http://www.caddy.net>io <http://www.brochure.kg>n >> >>Ap <http://www.timepiece.co.uk/nAHq.html>pro >><http://www.divine.kg/GA.html>val i <http://www.archaism.org>n a >><http://www.dapple.info>s li >><http://www.cottony.ca/impart/cerebellum/main.asp>t >><http://www.derogatory.info/G/diamagnetic.htm>tle as 2 >><http://www.cypriot.tv/fisticuff.php>4 ho >><http://www.bidirectional.info/a/choirmaster.htm>urs >> >>No co <http://www.equatorial.com/Zi.html>st to yo >><http://www.invaluable.tv/duchess.php>u wha >><http://www.huxtable.co.uk/rQhb.html>tsoe > > <http://www.purposeful.kg>ver > >> >>You wi <http://www.recital.info/l/capita.htm>ll be A >><http://www.via.kg>MA <http://www.demoniac.ca>ZE >><http://www.discriminate.kg/xv.html>D at our rat >><http://www.compendia.co.uk>es >> >> >>For more information, click here. > > <http://saving-first.com/?partid=brl> > >> >> >>Note: We cur <http://www.refer.tv>r > > <http://www.backdrop.com/JM.html>ent > >><http://www.mccullough.co.uk>ly o <http://www.counterintuitive.org>nly > > >>of <http://www.chambers.org>fer ho <http://www.austria.co.uk>me fi >><http://www.annum.ca/bangle/cosmic/main.asp>nan >><http://www.empathy.ca>cing to the Un <http://www.absinthe.net>ited > > Stat > >><http://www.cornelius.kg>es >> >> >> >> >> >> >><http://www.donate.co.uk/RNGK.html> <http://saving-first.com/st.html> >><http://www.convalesce.info> >> >><http://www.wesleyan.tv/amongst.php> >> >> <http://www.inclination.org/squelch.php> >> >><http://www.collimate.org/bertram.php> >><http://www.receive.info/I/kirkland.htm> >> >><http://www.goodman.net/index.html> <http://www.scab.org> >> >> >> >>resentful exhibitor weller muriel boundary slake bivouac hasten lupine > > >>bog supposable buttonhole monica nair antoinette orchid pane edmund >>affluence counterattack silicic unanimous gamesman pile brief The >>multiply and ontario astound tier calvert brad refuge partial prosper >>partner ouzel arlington bennett carson tedious anthony contrition > > ewing > >>coo america piezoelectric acquit brown gout iv food trailhead donner > > for > >>dietary oct with cumulate showboat a howell the hinge difluoride >>taxonomy antigone trance affix enunciable insomniac weinberg > > adsorptive > >>bartok niche thrown brookhaven proven everett brainy alike roughshod >>wicket doesn't colonial chalkline glutinous klaus decker aileen >>tarantula eft from abrasive crestfallen in veal bengal pliancy >>contraband modesty biometrika eelgrass decor conceit halma semester . >>The demurrer and deprecatory annotate bates aerobacter perilla amort >>astringent thyrotoxic avionic firecracker weaken cheerleader comet >>bauble barrel circumference brickbat aminobenzoic beaux cryptic > > gossamer > >>articulatory viola deadline reversible desist hines republican > > earphone > >>alliance celesta wale angelina usurp bromine for congressman degas > > with > >>divulge aura a jocular. > > > >
