Re: Drug email keeps getting thru

2006-03-15 Thread Jeremy Fairbrass
Something's not right there - the URL mentioned in the spam (deolich-MANGLED.com without the -MANGLED bit) should have hit on both the SURBL.org and URIBL.com blacklists, yet I don't see hits for either in the tests that were flagged for this spam - you only have

RE: Drug email keeps getting thru

2006-03-14 Thread Tracey Gates
Dinter [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 12:01 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Drug email keeps getting thru On Wed, Mar 08, 2006 at 11:47:49AM -0600, Tracey Gates wrote: Here is a list of the rulesets that I'm using: 70_sare_adult.cf

Drug email keeps getting thru

2006-03-08 Thread Tracey Gates
I keep getting these drug emails that antidrug.cf is suppose to catch but it's not. The emails are scoring low. I've updated the antidrug.cf rule. I've done sa-learn on them but we are still being inundated with these news emails. What can I do to get these to stop? Here is the header from

Re: Drug email keeps getting thru

2006-03-08 Thread Jeremy
Does the message body contain mangled (deliberately misspelled) drug names? If so, you might find the mangled.cf ruleset at http://www.rulesemporium.com/other-rules.htm to be useful - it helps my setup a lot with those sorts of spams, especially the drug ones. You might even consider

RE: Drug email keeps getting thru

2006-03-08 Thread Tracey Gates
@spamassassin.apache.org Subject: Re: Drug email keeps getting thru Does the message body contain mangled (deliberately misspelled) drug names? If so, you might find the mangled.cf ruleset at http://www.rulesemporium.com/other-rules.htm to be useful - it helps my setup a lot with those sorts of spams

Re: Drug email keeps getting thru

2006-03-08 Thread Theo Van Dinter
On Wed, Mar 08, 2006 at 11:47:49AM -0600, Tracey Gates wrote: Here is a list of the rulesets that I'm using: 70_sare_adult.cf 70_sare_unsub.cf 70_sare_bayes_poison_nxm.cf 70_sare_uri0.cf [...] How do I tell if I have URIBL lookups enabled? Those are the third party rules that

RE: Drug email keeps getting thru

2006-03-08 Thread Bowie Bailey
Tracey Gates wrote: Here is a list of the rulesets that I'm using: 70_sare_adult.cf 70_sare_unsub.cf 70_sare_bayes_poison_nxm.cf 70_sare_uri0.cf 70_sare_evilnum0.cf 70_sare_uri1.cf 70_sare_evilnum1.cf 70_sare_uri3.cf 70_sare_evilnum2.cf

Re: Drug email keeps getting thru

2006-03-08 Thread qqqq
OMG! What kind of server are you running this on? - Original Message - From: Tracey Gates [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Wednesday, March 08, 2006 10:47 AM Subject: RE: Drug email keeps getting thru | Here is a list of the rulesets that I'm using