Kelson wrote:
Steve Lake wrote:
Ok, remember that "Name Wrote: :)" emails? They've completely
changed. Now it's "hi username" instead. Joy, oh joy. Can anyone
find any common elements in these emails because whoever this putz is,
they're adapting a lot. They hit us, we adapt, they immediately
change tactics and come at us again.
I wrote a couple of rules for the first two rounds -- "name wrote:" and
"it's name :)" I've stopped bothering.
Between the SARE stock rules, header checks, and Bayes -- especially
Bayes -- the only place I'm seeing these show up "uncaught" now is my
spamtraps, and those haven't been run through SA in the first place.
Most of mine here are hitting with Bayes as well. I've only seen a
couple make it through. All others have been routed to my local folder
for Spam. Here is the scores from one such:
X-Spam-Level: xxxxxxxxxxxxxxx
X-Spam-Status: Hits:15.0 Learn:no Tests:BAYES_99,
DATE_IN_FUTURE_06_12,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,
RAZOR2_CHECK,SARE_CSBIG,SARE_MLB_Stock1,SARE_MLB_Stock5,TVD_STOCK1
I've concluded the subject line is a trap. They make it so consistent
that it just begs to be targeted, then they change it to another
consistent rule just to yank our chains and keep us busy.
