I have seen a lot of postings talk about the BAYES_99 rule. I think that this rule will help tremendously with catch some of this spam as I have already implemented the "news" rule that Phile Randall posted. I have searched my server and I do not find the BAYES_99 rule already on there so where do I find that to download and how do I make sure that it is implemented?
Thanks. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -----Original Message----- From: Iain Smith [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 21, 2006 9:37 AM To: SpamAssassin Subject: Re: "news spam" Payal Rathod wrote: > Hi, > To my various email addresses I am getting lot of "Re: news" spam. SA > is not catching all of it. I have pasted a links of headers and body > at, http://pastebin.ca/46477 Can someone advise on it please? > With warm regards, > -Payal Bayes has been catching these here, but in some cases the only other rule to fire has been HTML_MESSAGE. I've managed to largely mitigate this with a custom meta rule that combines BAYES_99 and a custom subject rule: header __LOCAL_NEWS_IN_SUBJ Subject =~ /re:.*news/i meta LOCAL_BAYES99_NEWS_SPAM (__LOCAL_NEWS_IN_SUBJ && BAYES_99) score LOCAL_BAYES99_NEWS_SPAM 2.0 You perhaps could expand it to other BAYES_x rules, depending on how brave you are feeling...YMMV. :-) Iain
