Am 2007-11-23 21:57:13, schrieb Loren Wilton: > >I'm seeing a lot of these spammed to my Mailman mailing lists. They > >generally consist of a single line with an obfuscated URL and a couple of > >blank lines. The URL looks like "abcde . com" (ie. a space on either side > >of the dot). > > If you post one or two somewhere I can write you a simple rule. I could > write something from just what you described, but I'd be real concerned > about the FP rate. If I see a couple messages I can probably do a little > better.
Since I use "spamc" from my "procmailrc" I have used a procmail rule to catch them... Without any FP in the first 1000 messages fom over 23.000. :0 * B ?? \/www .*[ a-zA-Z0-9] (cn|com)$ .ATTENTION.FLT_dot_space/ :0 * > 250000 .ATTENTION.FLT_oversized/ :0fw * < 250000 |spamc Thanks, Greetings and nice Day Michelle Konzack Tamay Dogan Network Open Hardware Developer Debian GNU/Linux Consultant -- Linux-User #280138 with the Linux Counter, http://counter.li.org/ ##################### Debian GNU/Linux Consultant ##################### Michelle Konzack Apt. 917 ICQ #328449886 50, rue de Soultz MSN LinuxMichi 0033/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature