-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rajkumar S wrote: > Hi, > > I am using the latest SARE stocks rules, and my spamassassin catches > most of the stock spam, but today I received a couple of spam peddling > stocks of CNHC. This spam is so perfect that it's getting negative > scores and not matchign any of the SARE rules. Any one with same > experience? > > raj
I have had several get through to me. I use the SARE rulesets, DCC, Pyzor and Razor. We use a number of DNSBL with Qmail but not the SpamCop BL. David Goldsmith ========== Message 1 X-Spam-Status: No, score=2.6 required=5.0 tests=BAYES_60, RCVD_IN_BL_SPAMCOP_NET autolearn=no version=3.1.7 X-Spam-Report: * 1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80% * [score: 0.6929] * 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see <http://www.spamcop.net/bl.shtml?81.94.226.206>] ========== Message 2 X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50, RCVD_IN_BL_SPAMCOP_NET,TVD_STOCK1 autolearn=no version=3.1.7 X-Spam-Report: * 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock... * 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% * [score: 0.5000] * 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see <http://www.spamcop.net/bl.shtml?85.99.195.82>] ========== Message 3 X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50, RCVD_IN_BL_SPAMCOP_NET,TVD_STOCK1 autolearn=no version=3.1.7 X-Spam-Report: * 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock... * 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% * [score: 0.5000] * 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked - see <http://www.spamcop.net/bl.shtml?85.99.195.82>] ========== Message 4 X-Spam-Status: No, score=3.9 required=5.0 tests=BAYES_60,KAM_TIME,TVD_STOCK1 autolearn=no version=3.1.7 X-Spam-Report: * 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock... * 1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80% * [score: 0.7386] * 0.5 KAM_TIME Pssss. Hey Buddy, wanna buy a watch? ========== -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3rc2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFamNz417vU8/9QfkRAvecAKCSAeOqjGtTaY/OZLymh8YoxzwNDACeNPo1 NvXej7T7V77ipGl9UvNjqPs= =D1xu -----END PGP SIGNATURE-----