Matt Kettler wrote:
First, a word of warning.. 2.63 is subject to DoS if a carefully made malformed message comes in. Not a huge security risk, but I'd at least consider upgrading to 2.64 or higher in the near future. (2.64 should be an easy upgrade from 2.63.. 3.0.x might be a bit more involved, but might be useful in the longer term.)
Hi Matt,
Thank you, i'm aware of the issue with 2.63, and i'm planning and upgrade to 2.64. I've actually been to lazy. Will take care of this next week. Thanks for reminding me :)
As for the spam, you might try some of these. Keep the scores low as these could cause problems for financial newsletters. However, in your case it looks like these are getting close to 5.0 on their own, so a heavy score isn't needed.
body OTCBB /\bOTCBB\b/ score OTCBB 0.4 describe OTCBB mentions penny stocks
body OTCBB2 /\bOver the Counter bulletin board\b/i score OTCBB2 0.4 describe OTCBB2 mentions penny stocks
body PINK_SHEET /\bPink Sheet (?:Stocks?|trading)\b/i score PINK_SHEET 0.4 describe PINK_SHEET mentions penny stocks.
body INVEST_ADVICE /\bInvestment Advice\b/i score INVEST_ADVICE 0.2 describe INVEST_ADVICE offers investment advice.
Note: i just wrote these, and have not tested or linted them. PINK_SHEET might have some logic errors, but I think it's ok.
Thanks for these rules. They linted OK, but i just got a similar spam that got 0.0 points (see attached file). When i ran it manually a few hours later i got the following score:
Content analysis details: (4.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 J_CHICKENPOX_41 BODY: 4alpha-pock-1alpha
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MIME_QP_DEFICIENT RAW: Deficient quoted-printable encoding in body
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?61.33.16.183>]
It doesn't seem like any of the rules of yours got triggered? The spam in question is attached.
Thank you
/ Martin
Received: from aspam._mydomain.com_ (192.168.2.80 [192.168.2.80]) by
exchangeserver.id.local with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.2653.13)
id VAQVTP84; Thu, 18 Nov 2004 10:48:06 +0100
Received: by aspam._mydomain.com_ (Postfix, from userid 500)
id 706CA13889; Thu, 18 Nov 2004 10:48:07 +0100 (CET)
Received: from TEST-6F4NTK1WBQ (unknown [61.33.16.183])
by aspam._mydomain.com_ (Postfix) with SMTP
id 4616213886; Thu, 18 Nov 2004 10:48:01 +0100 (CET)
Subject: Personal Entertainment Investments
Message-ID: <[EMAIL PROTECTED]>
From: "Gerald Kirk" <[EMAIL PROTECTED]>
To: "Gerald Kirk" <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Date: Thu, 18 Nov 2004 07:42:53 -0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--9_FAPLsq5F1.uJAvpBBpEU0"
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
aspam._mydomain.com_
X-Spam-Level:
X-Spam-Status: No, hits=0.0 required=5.0 tests=HTML_MESSAGE autolearn=no
version=2.63----9_FAPLsq5F1.uJAvpBBpEU0 Content-Type: text/plain; format=flowed; charset=iso-8859-15 Content-Transfer-Encoding: quoted-printable ----9_FAPLsq5F1.uJAvpBBpEU0 Content-Type: text/html; format=flowed; charset=iso-8859-15 Content-Transfer-Encoding: quoted-printable ----9_FAPLsq5F1.uJAvpBBpEU0-- <html>Please review this entire email about:<br> Motion DNA<br><br> Pink Sheets Stock Symbol MTDN<br> <a href="http://www.otcbb.com/asp/quote_module.asp?symbol=MTDN";>http://www.otcbb.com/asp/quote_module.asp?symbol=MTDN</a> <br><br> Big year expected in 2005 for Motion DNA<br> <br> Trading Symbol MTDN<br> Current Price (est.) $0.025<br> Valued Price (est.) $1.00<br><br> First time investors please read this:<br> <a href="http://www.pinksheets.com/otcguide/investors_howtobuy.jsp";>http://www.pinksheets.com/otcguide/investors_howtobuy.jsp</a> <br><br> Company officials expect to make the move to become a reporting company, due to their high expectations Motion DNA may surpass revenue projections for 2005. Currently with almost $500,000 in assets, zero debt, and increasing interest in its franchise program, company officials term the financial viability of Motion DNA as "solid". "All of the road blocks appear to be removed and Motion DNA expects to increase its market presence in the sports medicine industry and improve company revenues substantially," said Zig Ziegler, President of Motion DNA. "We can now focus on increasing customer awareness and sales of our products and services." <br><br> In a move expected to provide future franchisees with access to a solid customer base, Motion DNA officials have agreed to terms with one of the nation's leading health club chains with over 430 locations in the US and Europe. Motion DNA is expected to launch its first analysis center in one of the club?s Arizona locations. Franchisees will be awarded locations as part of their territories. A formal announcement is expected within the coming weeks. <br><br> Motion DNA is scheduled to demonstrate its newest pitching and overhead analysis at the upcoming Minor League Baseball Tradeshow. The tradeshow, scheduled for December 10, 11, and 12, coincides with the annual Winter Meetings for Major League Baseball. Representatives from more than 200 Major League and Minor League Baseball clubs, leagues and organizations typically attend the Baseball Trade Show during their annual meetings. In addition, baseball representatives, coaches, and organizers from Independent League, College, High School and Little League, as well as other baseball affiliated organizations are invited to attend the Baseball Trade Show. Current Major League Player Ramon Hernandez of the San Diego Padres and an endorser of Motion DNA is expected to attend the event and assist in promoting the company to his big league peers. Canadian Olympian Fastpitch Softball Player Lauren Bay, is also expected to attend the tradeshow along with other company officials <br><br> More about Motion DNA <br> Motion DNA Corporation provides diagnostic testing for medical professionals and sports organizations. Motion DNA's biomechanical analyses and detailed reports provide its licensees and consumers with solutions for preventing injuries, identifying physical limitations, diagnosing pre-existing injuries related to biomechanics, and improving physical performance levels. </html>
