Hm, I'm wondering why nobody replied to my posting. Did I do something wrong? Did I overlook a previous discussion on this? If so please point me the the RTFM or whatever. Thanks, Andy.
> Hi, recently I get lots of this type of spam but SA doesn't detect it. > > text/plain part: bayes poison (random words) > text/html part: > <html> > <body> > <p><font color="#FFFFF6">o54RTRtW H75u 8k35DWC74 BV1Ux626 37E4q6c T03O2 5p0v > JH 8mv5m1j bH8uj5l0 Q2M 87trccQJc k1YHo 384W4 2IkP6</font></p> > <A href="http://softsale.pe.kg";><IMG > src="cid:H61OH4mFLXutAPEb61W60xJ468i3xx57"; border=0></A> > <p><font color="#FFFFF0">BUGm1 Tc6dA5510 iiUM5354 6GsB H0676 2hK578xW ao8 RY4 > r303o6 2v5n7 2a63i0R d42</font></p> > <p><font color="#FFFFF8">2874W UIxK2n 75k622 CTYS 2Ob0</font></p> > </body> > </html> > > Then one or two GIFs attached. > > Complete examples can be found here: > http://andy.spiegl.de/sa-spam1.txt > http://andy.spiegl.de/sa-spam2.txt > http://andy.spiegl.de/sa-spam3.txt > > Has someone figured out a rule already? > Thanks, > Andy. -- o _ _ _ ------- __o __o /\_ _ \\o (_)\__/o (_) -o) ----- _`\<,_ _`\<,_ _>(_) (_)/<_ \_| \ _|/' \/ /\\ ---- (_)/ (_) (_)/ (_) (_) (_) (_) (_)' _\o_ _\_v ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Finagle's Third Law: In any collection of data, the figure most obviously correct, beyond all need of checking, is the mistake.
