On Wed, Oct 18, 2006 at 09:06:15AM -0700, Ken A wrote:
> These stock spams are usually dead easy to catch with spam assassin, but
> there's no "quick response" rules database available to get a new rule.
> It's a battle of hours, not days with these stock spams.

Provide enough manpower and it'd be trivial. :)

> Any thoughts on how to best address this issue, other than every SA
> admin on the planet writing their own rules every evening? I'd note that
> these are not identical spams, but are somewhat limited in their
> 'variety', and they are hitting DCC now.

Welcome to anti-spam rule development. :)   These are no different than
anything before...  People need to be paying attention to what's being
sent/received.  Rules need to be written and tested.  The good ones can
be distributed.

Via sa-update, new rules can be distributed very quickly, so it's really
about the time necessary to develop and test new rules, which generally
speaking comes down to manpower (there's some technology involved as well,
but that's addressable).

-- 
Randomly Selected Tagline:
"Don't mock the cookie." - Jackie Chan Adventures

Attachment: pgpuMFiitkACb.pgp
Description: PGP signature

Reply via email to