Bowie Bailey wrote: > And what would be the point of spammers getting around a filter that is > only used by people who are active SA users? Wouldn't that be shooting > themselves in the foot? Besides, if you need to get past this filter, > this means that the message was already blocked by the normal SA > filtering. So the ONLY people who would see the message are SA > administrators (who probably don't have a very high response rate to > spam anyway). > > Of course, this all assumes that the spammers bother to think about > it... > > They definitely don't... Let's face it.. if they did, they wouldn't be carefully tuning their spam to evade SpamAssassin. And they DEFINITELY DO tune their spam specifically to evade SpamAssassin rules. I've seen several obfuscation variants crop up specifically to evade antidrug rules. Many of these new twists were clearly based on reading the antidrug rules, deciphering the regexes, and tweaking to suit.
They also wouldn't be actively mining this list for email addresses. (which they also do.. try it sometime)
