Re[2]: More stock spam + strange cf files

[Peter Nitschke <em...@ace.net.au>]

On 9/02/2007 at 10:06 AM Chris Santerre wrote:

>> -----Original Message-----
>> From: Andy Figueroa [mailto:figueroa@andyfigueroa.us]
>> Sent: Friday, February 09, 2007 9:31 AM
>> To: SpamAssassin Users List
>> Subject: More stock spam + strange cf files
>> 
>> 
>> These guys are just rolling in scott free except for bayes.
>> See http://2chronicles36.org/stock.txt
>> 
>> I'm using 3.1.7 with latest sa-update + FuzzyOCR.cf & KAM.cf
>> 
>
>I must say, that a pretty well done spam. Whoever wrote it put some
thought
>into the phrasing. This one might take a bit. The wording is gonna be hard
>to tag. 
>
>--Chris


Pardon my ignorance here, but it is full of mis-spellings and phrases that
you wouldn't normally see, so why not just hit those?
"aid you to know"
"C O S T"
"brroker"
"ama zing"

Peter

Re: Re[2]: More stock spam + strange cf files

[Loren Wilton <lw...@earthlink.net>]

> Pardon my ignorance here, but it is full of mis-spellings and phrases that
> you wouldn't normally see, so why not just hit those?
> "aid you to know"
> "C O S T"
> "brroker"
> "ama zing"
>
> Peter

1) Most people can't spell these days.  These phrases might hit all over the 
place on ham.
2) These hadn't been used before in spam (except maybe the cost spelling) so 
there was no need for rules for them.

Summary: It would need a mass-check on new rules to see if they were good. 
That said, I expect that new rules will show up soon if this isn't a one-off 
spam.

        Loren