I am getting these through as well.... and I am running Chris's rules.
Are the OACYS_CONS_6 1.00, OACYS_DISGUISED_P0RN 6.00 rules part of SA?
Frank Tore Johansen wrote:
> Has anyone already made a rule for these? (See attachments for
> two spam-samples)
>
> Excerp from one (btw, how can you safely whitelist emails on this
> mailing list? Has such rules ever been abused?)
>
> Plus: [EMAIL PROTECTED], Bu'[EMAIL PROTECTED], Ad|p.&x, I0nam.|n,
M3ridi'a, X.3nica|, Am`bi3n,
> S0n'aTa, Fl3xe'ril, Ce|3b:rex, F`i0ric3t, [EMAIL PROTECTED]:|, U,
L3v`|tra,
> P:r0p3cia, Acyc|0vi'r, [EMAIL PROTECTED]
>
> -Frank.
>
>
Frank
scored over 10 on my system..
(score=10.804, required 5, BIZ_TLD 0.10, HTML_MESSAGE 0.10,
J_CHICKENPOX_12 0.60, J_CHICKENPOX_22 0.60, J_CHICKENPOX_71 0.60,
LOCAL_OBFU_VGR 1.80, OACYS_CONS_6 1.00, OACYS_DISGUISED_P0RN 6.00,
RM_rb_BODY 0.00, RM_rb_HTML 0.00, RM_rb_PARA 0.00, RM_rb_TITLE
0.00)
running SA 2.63 with most of the rules from Chris's rules emporiam.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
I am getting these through as well.... and I am running Chris's rules.
Are the OACYS_CONS_6 1.00, OACYS_DISGUISED_P0RN 6.00 rules part of SA?
Dan