You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Rajkumar S <ra...@gmail.com> on 2006/11/25 11:50:10 UTC
CNHC - stock spam
Hi,
I am using the latest SARE stocks rules, and my spamassassin catches
most of the stock spam, but today I received a couple of spam peddling
stocks of CNHC. This spam is so perfect that it's getting negative
scores and not matchign any of the SARE rules. Any one with same
experience?
raj
Re: CNHC - stock spam
Posted by David Goldsmith <dg...@sans.org>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Rajkumar S wrote:
> Hi,
>
> I am using the latest SARE stocks rules, and my spamassassin catches
> most of the stock spam, but today I received a couple of spam peddling
> stocks of CNHC. This spam is so perfect that it's getting negative
> scores and not matchign any of the SARE rules. Any one with same
> experience?
>
> raj
I have had several get through to me. I use the SARE rulesets, DCC,
Pyzor and Razor. We use a number of DNSBL with Qmail but not the
SpamCop BL.
David Goldsmith
==========
Message 1
X-Spam-Status: No, score=2.6 required=5.0 tests=BAYES_60,
RCVD_IN_BL_SPAMCOP_NET autolearn=no version=3.1.7
X-Spam-Report:
* 1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
* [score: 0.6929]
* 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?81.94.226.206>]
==========
Message 2
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,
RCVD_IN_BL_SPAMCOP_NET,TVD_STOCK1 autolearn=no version=3.1.7
X-Spam-Report:
* 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock...
* 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
* [score: 0.5000]
* 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?85.99.195.82>]
==========
Message 3
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,
RCVD_IN_BL_SPAMCOP_NET,TVD_STOCK1 autolearn=no version=3.1.7
X-Spam-Report:
* 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock...
* 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
* [score: 0.5000]
* 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?85.99.195.82>]
==========
Message 4
X-Spam-Status: No, score=3.9 required=5.0
tests=BAYES_60,KAM_TIME,TVD_STOCK1
autolearn=no version=3.1.7
X-Spam-Report:
* 2.4 TVD_STOCK1 BODY: Message looks like it's pushing a stock...
* 1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
* [score: 0.7386]
* 0.5 KAM_TIME Pssss. Hey Buddy, wanna buy a watch?
==========
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3rc2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFamNz417vU8/9QfkRAvecAKCSAeOqjGtTaY/OZLymh8YoxzwNDACeNPo1
NvXej7T7V77ipGl9UvNjqPs=
=D1xu
-----END PGP SIGNATURE-----
Re: CHNC - stock spam
Posted by Igor Chudov <ic...@Algebra.Com>.
I am getting such an incredible number of these spams that it boggles
my mind. I simply placed the stock ticker in my custom blocklist.
i
On Sat, Nov 25, 2006 at 04:20:10PM +0530, Rajkumar S wrote:
> Hi,
>
> I am using the latest SARE stocks rules, and my spamassassin catches
> most of the stock spam, but today I received a couple of spam peddling
> stocks of CHNC. This spam is so perfect that it's getting negative
> scores and not matchign any of the SARE rules. Any one with same
> experience?
>
> raj
Re: CNHC - stock spam
Posted by Loren Wilton <lw...@earthlink.net>.
I seem to have exactly one for that stock today. It had so much obfuscation
that I missed it was a stock spam. However, one SARE rule hit, and one of
Theo's hit, along with the usual collection of network tests.
Loren