Tom - I've seen these too, and have put in the following rules to try and catch them. They've helped, but a few are still slipping through. I think if you raise the scores some they'd catch a lot more, but I need to be a little more sure I won't get FPs before I do this!
body ODD_CHAR_DASH_BA /\-[,\~\'\`\_\.\^]/ describe ODD_CHAR_DASH_BA Odd combo of special chars score ODD_CHAR_DASH_BA .6 body ODD_CHAR_CARET_BA /\^[\-,\~\'\`\_\.\^]/ describe ODD_CHAR_CARET_BA Odd combo of special chars score ODD_CHAR_CARET_BA .6 body ODD_CHAR_DOT_BA /\.[\^\~\'\`\_]/ describe ODD_CHAR_DOT_BA Odd combo of special chars score ODD_CHAR_DOT_BA .6 body ODD_CHAR_UNDERSCORE_BA /\_[\.\^\-,\~\'\`]/ describe ODD_CHAR_UNDERSCORE_BA Odd combo of special chars score ODD_CHAR_UNDERSCORE_BA .6 body ODD_CHAR_TIC1_BA /\`[\_\.\^\-,\~\']/ describe ODD_CHAR_TIC1_BA Odd combo of special chars score ODD_CHAR_TIC1_BA .6 body ODD_CHAR_TIC2_BA /\'[\`\_\.\^\-,\~]/ describe ODD_CHAR_TIC2_BA Odd combo of special chars score ODD_CHAR_TIC2_BA .6 body ODD_CHAR_TILDE_BA /\~[\'\`\_\.\^\-,\~]/ describe ODD_CHAR_TILDE_BA Odd combo of special chars score ODD_CHAR_TILDE_BA .6 body ODD_CHAR_COMMA_BA /,[\~\'\`\_\.\^\-]/ describe ODD_CHAR_COMMA_BA Odd combo of special chars score ODD_CHAR_COMMA_BA .6 Sandy ----- Original Message ----- From: "Thomas Kinghorn" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 03, 2004 5:38 AM Subject: more are more junk getting through > Hi List > > I have had a dramatic increase in junk mail, > > I am using SA 2.63 with SURBL. > MTA is exim 4.34 using sa-exim-4 > > I have attached a sample. > > Subjects and originating IP's are always different > But the formatting of the body is similar. > > Any ideas would be appreciated. > > <<important increased muscle mass without exercise.msg>> > > Regards, > > Tom Kinghorn > >
