15.10.2009 22:43, Adam Katz kirjoitti:
A score of 6 is FREAKISHLY high, even for something with a very low FP
rate. I'd score that around 1.2 if I trusted it. I like it, so I'm
throwing it in khop-general as MC_TAB_IN_FROM scoring at 0.6 for now:
# @Mike Cappella on sa-users, 20090806
On 10/15/2009 10:56 PM, Henrik K wrote:
You missed the important post:
http://mail-archives.apache.org/mod_mbox/spamassassin-users/200908.mbox/%3c200908222035.57647.mark.martinec...@ijs.si%3e
For general use, the rule should be tightened. The relaxed version only
hit mailing lists from a
Ah, the old SPAN trick. I haven't seen it, so I imagine my old code is
still catching them. LOL
The key to this trick is the spammer tries to insert 'invisible' text.
Either very small font size, as in your example, or colors that match the
background, or both, so that the intended
On Thu, 15 Oct 2009, Charles Gregory wrote:
Ah, the old SPAN trick. I haven't seen it, so I imagine my old code is
still catching them. LOL
None of the existing FLOAT rules caught these.
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
jhar...@impsec.org
Jari Fredriksson wrote:
1.0 RCVD_IN_BRBL_LASTEXT RBL: Received via a relay in Barracuda BRBL
0.9 RCVD_IN_PBLRBL: Received via a relay in Spamhaus PBL
1.7 RCVD_IN_HOSTKARMA_BL RBL: HostKarma: relay in black list
0.0 PRICES_ARE_AFFORDABLE BODY: Message says that prices
On Thu 15 Oct 2009 09:43:52 PM CEST, Adam Katz wrote
# @Mike Cappella on sa-users, 20090806 20:50 UTC + 20090822 at 18:19
header MC_TAB_IN_FROMFrom:raw =~ /^\t/m
describe MC_TAB_IN_FROMFrom: Contains a tab
scoreMC_TAB_IN_FROM0.6 # 20091015, considering bump to 1.2
also tab
On Thu, Oct 15, 2009 at 03:43:52PM -0400, Adam Katz wrote:
# @Mike Cappella on sa-users, 20090806 20:50 UTC + 20090822 at 18:19
header MC_TAB_IN_FROMFrom:raw =~ /^\t/m
describe MC_TAB_IN_FROMFrom: Contains a tab
scoreMC_TAB_IN_FROM0.6 # 20091015, considering bump to 1.2
