spam slippin through

["help@nantucket.net" <he...@nantucket.net>]

running a site wide SA 2.6 setup, some XXX html only mails are impossible to
stop, getting scores as low as 2.0

the email just calls images, and thats about it.  should i paste the subject
here, they are quite distinct, and im sure others are getting them.  

Re: spam slippin through

["help@nantucket.net" <he...@nantucket.net>]

As Usual, you're all quite helpful! Thank you!



> From: Matt Kettler <mk...@evi-inc.com>
> Date: Tue, 12 Oct 2004 12:52:36 -0400
> To: "help@nantucket.net" <he...@nantucket.net>, <us...@spamassassin.apache.org>
> Subject: Re: spam slippin through
> 
> At 12:25 PM 10/12/2004, help@nantucket.net wrote:
>> running a site wide SA 2.6 setup, some XXX html only mails are impossible to
>> stop, getting scores as low as 2.0
>> 
>> the email just calls images, and thats about it.  should i paste the subject
>> here, they are quite distinct, and im sure others are getting them.
> 
> Are you using the Mail::SpamCopURI add on to check the SURBL system?
> 
> SURBL is pretty effective against the weblink-only and weblink+image only
> types of spam. It's basicaly a domain-name based DNS blacklist that is
> queried for domains contain in URLs.
> 
> http://www.surbl.org/
> 
> SpamCopURI for SA 2.6x can be downloaded here:
> http://sourceforge.net/projects/spamcopuri/
> 
> SpamCopURI installs more-or-less as a patch to the code your existing copy
> of SA. It modifies EvalTests.pm and adds a .cf file to
> /etc/mail/spamassassin to call the new eval.
> 
> (no need for SpamCopURI if you're using SA 3.0 or higher, SURBL queries are
> enabled by default with SA 3.x)
> 
> 

Re: spam slippin through

[Matt Kettler <mk...@evi-inc.com>]

At 12:25 PM 10/12/2004, help@nantucket.net wrote:
>running a site wide SA 2.6 setup, some XXX html only mails are impossible to
>stop, getting scores as low as 2.0
>
>the email just calls images, and thats about it.  should i paste the subject
>here, they are quite distinct, and im sure others are getting them.

Are you using the Mail::SpamCopURI add on to check the SURBL system?

SURBL is pretty effective against the weblink-only and weblink+image only 
types of spam. It's basicaly a domain-name based DNS blacklist that is 
queried for domains contain in URLs.

http://www.surbl.org/

SpamCopURI for SA 2.6x can be downloaded here:
http://sourceforge.net/projects/spamcopuri/

SpamCopURI installs more-or-less as a patch to the code your existing copy 
of SA. It modifies EvalTests.pm and adds a .cf file to 
/etc/mail/spamassassin to call the new eval.

(no need for SpamCopURI if you're using SA 3.0 or higher, SURBL queries are 
enabled by default with SA 3.x)

Re: spam slippin through

[Rakesh <ra...@netcore.co.in>]

Try implementing SpamCop URI checks or upgrade to SA 3.0 you will get 
rid of these unstoppable spam mails. I got amazing results after 
implementing URI checks.

Rakesh


help@nantucket.net wrote:

>running a site wide SA 2.6 setup, some XXX html only mails are impossible to
>stop, getting scores as low as 2.0
>
>the email just calls images, and thats about it.  should i paste the subject
>here, they are quite distinct, and im sure others are getting them.  
>
>  
>

RE: spam slippin through

[Bret Miller <br...@wcg.org>]

> running a site wide SA 2.6 setup, some XXX html only mails 
> are impossible to
> stop, getting scores as low as 2.0
> 
> the email just calls images, and thats about it.  should i 
> paste the subject
> here, they are quite distinct, and im sure others are getting them.  

You really need to upgrade so you can take advantage of SURBL, which has
pretty much eliminated that image-only spam here.

Bret