You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Todd Adamson <ta...@routers.com> on 2007/02/07 15:47:36 UTC

lapses in basic tests?

I have been using spamassassin for close to three or four years now, 
and love it dearly.  With the move to version 3.x, we are supposed to 
remove the independent drug rules because they were included in the 
that version.  I moved away from them many months ago, but it seems 
that I am very slowly getting more and more of the basic obfuscated 
basic drugs.  They don't even trip the rules at all.  The latest 
example is:
************SPAM EMAIL****************
Hi,

Viragra  1,80
Ciralis  3,00
Lervitra 3,35

http://accoucheu.printeryml-com

Replace "-" with "." in the above link
************SPAM EMAIL*****************

Here are the scores from within the header:

@@@@@@@@@@@@@@@@@@@@@@@@@@
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05)
X-Spam-Level: ****
X-Spam-Status: No, score=4.2 required=5.0 tests=DNS_FROM_RFC_BOGUSMX,
	RCVD_IN_DSBL,RCVD_IN_NJABL_PROXY autolearn=disabled version=3.1.7
@@@@@@@@@@@@@@@@@@@@@@@@@@@

As you can see, none of the drug rules have been hit.

Details of spamassassin:  Ver 3.1.7 / sa-update run weekly(2/7/7 
latest) / no bayes / Network tests running

Any thoughts or suggestions?

Todd
tadamson@routers.com



RE: lapses in basic tests?

Posted by "Martin.Hepworth" <ma...@solidstatelogic.com>.
Todd

Mangled.cf from www.rulesemporium.com/other-rules.htm works well for me
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: Todd Adamson [mailto:tadamson@routers.com]
> Sent: 07 February 2007 14:48
> To: users@spamassassin.apache.org
> Subject: lapses in basic tests?
>
> I have been using spamassassin for close to three or four years now,
> and love it dearly.  With the move to version 3.x, we are supposed to
> remove the independent drug rules because they were included in the
> that version.  I moved away from them many months ago, but it seems
> that I am very slowly getting more and more of the basic obfuscated
> basic drugs.  They don't even trip the rules at all.  The latest
> example is:
> ************SPAM EMAIL****************
> Hi,
>
> Viragra  1,80
> Ciralis  3,00
> Lervitra 3,35
>
> http://accoucheu.printeryml-com
>
> Replace "-" with "." in the above link
> ************SPAM EMAIL*****************
>
> Here are the scores from within the header:
>
> @@@@@@@@@@@@@@@@@@@@@@@@@@
> X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05)
> X-Spam-Level: ****
> X-Spam-Status: No, score=4.2 required=5.0 tests=DNS_FROM_RFC_BOGUSMX,
> 	RCVD_IN_DSBL,RCVD_IN_NJABL_PROXY autolearn=disabled
version=3.1.7
> @@@@@@@@@@@@@@@@@@@@@@@@@@@
>
> As you can see, none of the drug rules have been hit.
>
> Details of spamassassin:  Ver 3.1.7 / sa-update run weekly(2/7/7
> latest) / no bayes / Network tests running
>
> Any thoughts or suggestions?
>
> Todd
> tadamson@routers.com
>





**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************