You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@spamassassin.apache.org by "Casanova, Chase" <Ch...@rdu.com> on 2004/04/21 22:52:45 UTC

Spam that slipped through the cracks -> FW: Your Friends Will Envy You

How could this have been stopped?  And what is with the paragraph from a book at the bottom of it?
 
Thanks,
Chase Casanova 
IT Specialist 
RDU Airport Authority 
(919) 840-2100 ext 225 
chase.casanova@rdu.com

Re: Spam that slipped through the cracks -> FW: Your Friends Will Envy You

Posted by Matt Yackley <sa...@yackley.org>.

Casanova, Chase said:
> How could this have been stopped?  And what is with the paragraph from a
> book at the bottom of it?
>
> Thanks,
> Chase Casanova
> IT Specialist
> RDU Airport Authority
> (919) 840-2100 ext 225
> chase.casanova@rdu.com
>

Hi Chase,
Here are what triggered on my system, just testing the body, no headers:
 0.8 SARE_PLEASEPARTNR      BODY: common spammer phrasing
 0.8 SARE_SXLIFE            BODY: Talks about your sex life
 0.8 SARE_BEASTUD           BODY: common spammer phrasing
 2.0 EvilNumber_A_ARUBA     BODY: Phone number or address pulled from spam

Check out EvilNumbers ruleset and sare_adult for this specific spam, but
you should also take a gander at all of the other sets at:

http://www.rulesemporium.com

HTH,


-matt