On Tue, 16 Nov 2004, Martin wrote: > I'm using SA 2.6x with SURBL and alot of SARE rules. Recently alot of stock > spams are getting through.
When I replaced the _mydomain_ with our local domain in that message, it scores 7.2 points here, just from DNSBL lists, and 2.1 for bayes. After training the system on it (reporting to DCC, etc), it scores 9.2 However, it looks like you received it from dynamic.hinet.net . Useing DNS BL's to block dynamic IP's will probably keep this from comming into the system at all. IE, we block from anything dynamic.hinet.net , so this would never have hit our SA in the first place. If this particular spam uses dynamic IP's to send, it may be that it isn't getting reported because a good number of people use this kind of blocking before SA. ========================================================== Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/
