We've been having trouble with spam slipping through. They're typically from hotmail (and hotmail servers), but not always.
These are non-bayesian sounding emails EXCEPT for a long string of spam words, without spaces, that have double letters in them/mispellings. They're obviously crafted to slip through filters. Examples include: Subject: NoNeedToWait,DonlwoadYoourOrignaialWidnows7CcopyAndSaveMoney.GraettRanggeOffWorld-LeadaingSofwatreA Body: CheeapLatetstSoftwtareeAvaillableForIntsantDonwoladAfterPurchase http://www.monikamatti.com/ In front of herself and grandmother, walked Mr. Livingstone, moody, the sandy soil all around him gleamed in the dew. He shrugged his considerable duration, during which he struggled to be calm, and I Subject: SaveBigMoneyOnLeaidingBbarndSsofftwaare.AAllPopuaalrrSsoftwwareIteemmss Body: GreattestSotfwareDdeealsAvailable,TrutsedAndVefriiedOnilneStore http://www.ardelislucy.com/ the world and bewildered upon the path of life. Let us see if VI. Greg Prepares for Flirtation Walk pulling rapidly out of the bay, each with its own particular flag I'm looking for suggestions on how to block these. I've though of 1) Somehow splitting the string, but even with that, the mispellings might slip through (though I guess the server will learn them too) 2) Somehow negatively scoring subjects with single words longer than 30 characters - but I'm afriad of blocking legit mails, say with a URL in the subject, which my silly users and their contacts do sometimes 3) Somehow negatively scoring a mail with more than 30 characters in a non-url string that's followed by a url on a following line. Thanks for any insight. ------------------------------------------------------------------------------ Colocation vs. Managed Hosting A question and answer guide to determining the best fit for your organization - today and in the future. http://p.sf.net/sfu/internap-sfd2d _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
