John Hardin wrote:
>
> On Wed, 17 Jun 2009, omehegan wrote:
>
>> Lately a lot of 419 and investment spams have been getting through with
>> very low SA scores.
>>
>> http://www.nerdnetworks.org/spam/spam1
>> http://www.nerdnetworks.org/spam/spam2
>> http://www.nerdnetworks.org/spam/spam3
>> http://www.nerdnetworks.org/spam/spam4
>> http://www.nerdnetworks.org/spam/spam5
>> http://www.nerdnetworks.org/spam/spam6
>
> Have you tried the Sought-Fraud ruleset? How about the SARE fraud ruleset?
> I use both and, with bayes, get only rare leakers - mostly very short
> ones.
>
> --
> John Hardin KA7OHZ http://www.impsec.org/~jhardin/
> jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
> Win95: Where do you want to go today?
> Vista: Where will Microsoft allow you to go today?
> -----------------------------------------------------------------------
> Tomorrow: SWMBO's Birthday
>
>
I already use the Sought-Fraud ruleset. Based on my logs, it's working, but
it didn't hit on any of these messages. I just installed the SARE fraud
ruleset, and verified that it's getting loaded, but it doesn't hit on any of
these sample messages.
--
View this message in context:
http://www.nabble.com/Lots-of-419-scam-and-investment-spams-getting-through-suddenly-tp24079208p24081502.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
