John Hardin wrote:
It would be somewhat more robust if SA offered multiline rawbody matching, but try this:
thanks for your effords. unfortunatly spammers read this list and they'll adapt too quickly to make any use of custom rules
It's also fairly specific to the HTML in the sample message.
exactly. they'll just change the html in the next wave. this spam isnt new, yet the SA list is once again full of threads about exactly that recent wave, becouse old rules dont match.
the only thing really helpfull would be a system that adapts faster then spammers, which would be heuristic, and everyone knows thats broken by design. maybe cheap labor? *gasp*
