On Tue, 2003-05-27 at 21:12, Chris Santerre wrote:
> > > header X_KNOWN_SPAMMER From =~ /@(domain\.com|spam\.(net|com))>?$/
> >
> > You should simply reject these at the MTA level by access rules.
>
> Agreed! However someone like 22its4you.com don't send from this domain. They
> host the images on it. So I recommend _not_ using a Known_spammer rule as
> header, but rawbody.
>
> Spammers change this often as well.
Sure, I do know that. It is really not a smart rule, but it works very
well for me in this special case.
However, these lame spammers that really are annoying the hell out of
me, are sending me _daily_ mails from the _same_ domain. They never
changed and seem to have dedicated this domain to sending SPAM.
And to top that, some of them have caught more than one of the addresses
that are checked by me -- so I even get some of them double every day...
I set this to match the 'From:' header, cause it never changed so far.
And I do not know anything about RAWBODY. If anyone feels like, please
enlighten me about it.
btw, as I said previously: I had to set this rude rule, cause the mails
were not rated SPAM by SA...
...guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
