Am 2007-11-23 21:57:13, schrieb Loren Wilton:
> >I'm seeing a lot of these spammed to my Mailman mailing lists. They 
> >generally consist of a single line with an obfuscated URL and a couple of 
> >blank lines. The URL looks like "abcde . com" (ie. a space on either side 
> >of the dot).
> 
> If you post one or two somewhere I can write you a simple rule.  I could 
> write something from just what you described, but I'd be real concerned 
> about the FP rate.  If I see a couple messages I can probably do a little 
> better.

Since I use "spamc" from my "procmailrc" I have used a procmail rule to
catch them... Without any FP in the first 1000 messages fom over 23.000.

    :0
    * B ?? \/www .*[ a-zA-Z0-9] (cn|com)$
    .ATTENTION.FLT_dot_space/

    :0
    * > 250000
    .ATTENTION.FLT_oversized/

    :0fw
    * < 250000
    |spamc


Thanks, Greetings and nice Day
    Michelle Konzack
    Tamay Dogan Network
    Open Hardware Developer
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSN LinuxMichi
0033/6/61925193    67100 Strasbourg/France   IRC #Debian (irc.icq.com)

Attachment: signature.pgp
Description: Digital signature

Reply via email to