> -----Original Message----- > From: Evan Platt [mailto:[EMAIL PROTECTED] > Sent: Friday, July 15, 2005 11:09 AM > To: spamassassin-users@incubator.apache.org > Subject: Re: Penny stocks, microcaps, etc. > > > At 10:04 PM 6/23/2005, you wrote: > >Sare's obfuscation rule set is doing a pretty good job now > of catching > >most of those that attempt obfuscation. The other SARE rules (bml, > >genlsubj, header, etc) do a decent job with the others. Won't catch > >them all, but they catch better than 99% of them here. > > I know I'm coming in late in this thread but most of the stock spams > I've seen lately should be pretty east to catch, but.... then again, > I couldn't write a rule if I had to. > > The spams I've seen contain a LARGE disclaimer, with granted a FEW > typos. Does any of this help anyones rules? > > Disclaimer:
*snip* Well yes and no. SARE does have disclaimer rules. SARE trys to pick out underlying key phrases that are NOT likely to change over time. This is very tough. If you are using the SARE rulesets and these are still getting by, then we may need to update the rules a little. I'll keep an eye out for spams that miss the ruleset. --Chris
