You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Greg D - N V Host <gr...@nvhost.com> on 2004/07/06 20:37:39 UTC

New subject/sender 6.7.9.6, similar to the $122342 subject/sender msg's

Greetings all,

I finally started seeing the $31234 subject emails disappearing...  Now I am seeing these:

From: 6.9.7.6

Subject: 2.1.5.2

Has anyone else seen these "yet" ?   =-\

If anyone has rules for this, I'd like to check them out.

Thanks,

G
 


-----Original Message-----
From: Lucas Albers [mailto:admin@cs.montana.edu]
Sent: Tuesday, July 06, 2004 1:46 PM
To: spamassassin-users@incubator.apache.org
Subject: phishing rules


Are their currently phishing rules in sare for:
paypal,usbank,and citibank, the top 3 phishing spoof domains?

If their are not, here are some:
http://bugzilla.spamassassin.org/show_bug.cgi?id=3570

It would be nice to have anti-phishing rules for all the top financial
sites, as an interim until they deploy spf.

-- 
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana






Re: New subject/sender 6.7.9.6, similar to the $122342 subject/sender msg's

Posted by Kelson Vibber <ke...@speed.net>.
On Tuesday 06 July 2004 11:37 am, Greg D - N V Host wrote:
> I finally started seeing the $31234 subject emails disappearing...  Now I
> am seeing these:
>
> From: 6.9.7.6
>
> Subject: 2.1.5.2
>
> Has anyone else seen these "yet" ?   =-\
>
> If anyone has rules for this, I'd like to check them out.

I've seen just one, and it scored 13.6.  Admittedly that includes both 
ws.surbl.org and sc.surbl.org, but it hit all three of Razor, Pyzor and DCC, 
which is enough to push it over 5.0.

P.S. To start a new topic, please just post a new message - don't reply to 
another one.  When you reply to a message it includes threading information 
that better mail and news readers use to group messages together.  If someone 
is using a program that recognizes that info, and has chosen to ignore the 
thread on phishing, they'll never notice this post.

-- 
Kelson Vibber
SpeedGate Communications, <www.speed.net>