You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Anders Norrbring <li...@norrbring.se> on 2005/11/22 22:17:25 UTC
Rules for all these "wrist watch" sales?
Is there any effective rule set for blocking off all these "chronometer"
and "wrist watch" spams?
Preferably one that I can add into my rules_du_jour..
--
Anders Norrbring
Norrbring Consulting
Re: wrist watch spam getting old
Posted by Robert Menschel <Ro...@Menschel.net>.
Hello JP,
Thursday, December 15, 2005, 8:37:10 PM, you wrote:
JK> I am getting a lot of wrist watch spam with links to web pages which
JK> have
JK> malodorous scripts embedded in them
JK> a typical spam looks like this:
Tests added to 70_sare_specific.cf in the last month should help catch
some/many/most of these, and we're continuing to work on improving the
hit rate.
Bob Menschel
wrist watch spam getting old
Posted by JP Kelly <li...@jpkvideo.net>.
I am getting a lot of wrist watch spam with links to web pages which
have
malodorous scripts embedded in them
a typical spam looks like this:
From: danepridgett@phat.co.nz
Subject: FW: Because you deserve something special watch-jewelry
Date: December 12, 2005 7:41:01 AM PST
To: ting@jpkvideo.net
Received: from exim by mail2.jpkvideo.net with spam-tagged (Exim
4.60) (envelope-from <da...@phat.co.nz>) id IRHNZV-000DE1-3O
for jpkelly@jpkvideo.net; Wed, 14 Dec 2005 04:57:32 -0800
Received: from [69.59.174.108] (helo=mail.jpkvideo.net) by
mail2.jpkvideo.net with esmtp (Exim 4.60) (envelope-from
<da...@phat.co.nz>) id IRHNZU-000DDX-PE; Wed, 14 Dec 2005
04:57:30 -0800
Received: from [59.40.216.127] (helo=phat.co.nz) by mail.jpkvideo.net
with smtp (Exim 4.20) id IRHNZT-000B8V-J3; Wed, 14 Dec 2005 04:57:30
-0800
Message-Id: <F0...@phat.co.nz>
User-Agent: AspMail 4.0 4.03 (SMT470603F)
X-Accept-Language: en-us
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on crabtree
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0
tests=BAYES_50,DATE_IN_PAST_24_48 autolearn=no version=3.0.4
Jai,
I am thinking you will love this.
Jagger
-------Original Message-------
From: Milissa [mailto:ting@jpkvideo.net]
Sent: Sunday, December 04, 2005 9:41 AM
To: Jagger
Subject:
Sweet Jagger,
Here is a excellent gift for you. I saw you looking at these
excellent rep
lica watches and I know you love it.
It is not often that you ask for anything, but I have looked at
these rep
lica-watches, and I see why you want so much one. So get it. Don't worry
about safe mailing service. They have the tracking system.
http://in.geocities.com/johnie_keeley/
Pick up the gift box too.
With my most sincere love,
Rosaleen
received, as chief, a certain emerge shelter proportion of feather the
witch-doctor's returned to those behind. Tarzan could hear the words.
The
scout was telling the order other members of the tribe that building the
Ivan coast was
eyes like stylist an Italian. Then too he is the oily most delightful
company possible
Re: Rules for all these "wrist watch" sales?
Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Anders,
Tuesday, November 22, 2005, 1:17:25 PM, you wrote:
AN> Is there any effective rule set for blocking off all these "chronometer"
AN> and "wrist watch" spams?
AN> Preferably one that I can add into my rules_du_jour..
The current 70_sare_specific.cf should catch them. If you have one that gets
through without at least two SARE hits, send me the sample, to
RMSA@Menschel.net
Bob Menschel
Re: Rules for all these "wrist watch" sales?
Posted by Jeff Chan <je...@surbl.org>.
On Tuesday, November 22, 2005, 1:17:25 PM, Anders Norrbring wrote:
> Is there any effective rule set for blocking off all these "chronometer"
> and "wrist watch" spams?
> Preferably one that I can add into my rules_du_jour..
If they are advertising web sites, make sure you have network
tests and SURBLs enabled and they will mostly get blocked.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/