> I'm getting this kind of email like once a day and it seems like it
> scores 0 everytime. I'm using spamasssin 3.1 and feeding them to
> sa-learn as spam aswell.
Well, some obvious questions:
1. Is bayes really working for you normally?
2 Do you have any local german-language spam rules?
Now, I don't speak german, but a quick glance makes me think this is a
typical english spam translated to german by someone that doesn't know the
language well.
To me, it looks like it is just full of things that would be easy to catch.
But then, since I don't speak the language and can't congugate a verb or
noun or whatever declines in German, I can't guess what trivial one-letter
changes would render any rules I wrote useless. I also don't know what
phrases or words that look like good catches might be just common German
phrases.
I ran this thru SA here and got about 7 points. But 1.1 points was from a
rule that was English based and inapplicable to German, and 3 points were
from local rules that are inapplicable. That leaves 3.2 points from SURBL,
which isn't enough by itself to make this spam.
Now I could knock out a handful of body rules to catch this for you, but
they would all be guesses, and probably some pretty bad guesses at that. I
would suggest that a simple thing to try would be to look through this and
stick some spammy-sounding phrases into a stock rule form, and then stick
those rules in your local.cf and see how they do. This isn't the apex of
rule writing, but it should certainly be good enough for this kind of spam.
Use this basic form:
body MY_RULE_NAME1 /words I don't like/is
score MY_RULE_NAME1 1
describe MY_RULE_NAME1 I don't like these words
For example, from that spam and making wild guesses:
body MY_10_MIN_FREE /10 Minuten for free/is
body MY_ALWAYS_HARDCORE /Hardcore rund um die Uhr/is
body MY_ANY_TIME /Sex [\w\s]+wann Du es willst/is
body MY_LOTS_OF_FILM /Über [\d\.]+ verschiedene Filme/is
body MY_TASTY_CATEGORIES /Kategorien treffen garantiert jeden
Geschmack/is
body MY_HUH_1 /Feuchte Fotzen/is
body MY_EXTREME_ACTION /extrem geile Sexaction/is
body MY_TRUE_LIES /das ist unglaublich und dennoch wahr/is
Add a score and a description if you want to each of those lines (they will
get 1 point scores by default if you don't give a score) and see how much of
your normal mail you can manage to turn into spam! ;-)
Loren
PS: Blame Google translator and my sense of 'humor' for those rule names.
