You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2011/05/19 03:52:21 UTC
[Bug 6594] New: Similar to SARE's evilnumbers - something needed in
SA?
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6594
Bug #: 6594
Summary: Similar to SARE's evilnumbers - something needed in
SA?
Product: Spamassassin
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: minor
Priority: P2
Component: Rules
AssignedTo: dev@spamassassin.apache.org
ReportedBy: software+spamassassin@kd6lvw.ampr.org
Classification: Unclassified
I'm seeing alot of spam with the following signature:
Want to be removed?
http://www.bestmove2u.com/ef0f27c87345174/c9b3c4d496fbdba7a1310/56ccca88293d342e710bcaae3630d93b/03/index.html
Or,
1804 Garnet Ave #142
Pacific Beach, CA 92109
SARE had the "evilnumbers" extension which targeted phone numbers and addresses
left by spammers, but the main SA ruleset doesn't seem to have an equivalent.
The URL varies. "Want to be removed?" (which has rule REMOVE_BEFORE_LINK et.
al.) and the address are constant. Should we (or do we even want to) create a
ruleset similar to that concept to list known spammer addresses and telephone
numbers? REMOVE_BEFORE_LINK seems insufficient.... Generic rules aren't
strong enough in this case.
PS: Most of the message was an image file to bypass text-based scanners like
SA.
This particular spammer has been using this address unchanged for a few months.
--
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
[Bug 6594] Similar to SARE's evilnumbers - something needed in SA?
Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6594
Kevin A. McGrail <km...@pccc.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |kmcgrail@pccc.com
Target Milestone|3.3.2 |3.4.1
--- Comment #1 from Kevin A. McGrail <km...@pccc.com> ---
Moving all open bugs where target is defined and 3.4.0 or lower to 3.4.1 target
--
You are receiving this mail because:
You are the assignee for the bug.