Paul, I've seen a few today.  From literally all over the world,
spamvertising a website in China with a disposable name.

aa
gg
kk
ll
nn
....

I found that the various following tests were good enough to catch all of
the ones we received, and are typical of the tests that were triggered.  You
might find that the "subject is" test is perfect, but only for a short time.

SPAMDOMAINS
NOPOSTMASTER
BASE64
SPAMCOP
HELOBOGUS
NOLEGITCONTENT
COUNTRY
NJABLDUL
EASYNET-DYNA
PSBL
DYNAMIC

-----Original Message-----
From: paul [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 30, 2003 10:17 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] new methods of subjects?


Has anyone seen an increase in spam with subjects of rr or ss or something
similar? I've seen a huge increase in these, as well as bogus yahoo/hotmail
accounts.

Would filters like these be good?

SUBJECT 0 IS RR

CONTAINS in this case would catch words like "correct" "Hi Barry!" etc.
There doesn't appear to be any spaces after the subject.

So far I've seen it for rr,tt,vv,ww, and a few others.

Just looking for input.

Paul


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to