On Thu, 10 Jun 2004, Dimitrios wrote:
> We get lots of spam which hit absolutely none of the SA score rules.
>
> They ofcourse get marked as spam because they hit BAYES_99 and some
> times, some of the RCVD_IN_...
>
> Are there any custom rules for this? Here is an example:
>
> -- CUT
> >The hand that rocks the cradle rules the world
>
> Hello, just see our prices for most popular software.
> Looking for not expensive high-quality software? We might have just what you
> need.
> Adobe PhotoShop CS 8.0 ................... Only $45, You s'ave $610 bucks!
> MS Windows XP Professional ............... Only $40, You sav'e $160 bucks!
> Norton Antivirus 2004 Professional ....... Only $15, You s'ave $485 bucks!
> Corel Draw Graphics Suite 11 ............. Only $60, You sa've $140 bucks!
> Microsoft Office 2003 Professional ....... Only $45, You sa've $255 bucks!
> http://tack.dutyfreestore.info/?dorado
> Here you will find 1800+ software for very low prices ;-)
[snip..]
As others have noted, 70_sare_oem.cf (also there are a bunch of other
good rules at the SARE site, use them ;)
Note that the hostname in that URI is also listed in SURBL.
If you had SpamCopURI installed that spam would have been hit.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
