Hi Henrik,

How do you catch those?


-----Original Message-----
From: Gaudreault Pierre [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 01, 2007 9:22 PM
To: Casey Mary
Subject: Just wanted to say hi


You able allure fishwife? We can help you
 Look "www" dot "2211122" and add dot COM at the end.

Drapy na prednich nohach si kocka obrusuje pravidelnym skrabanim, 

ktere zvlhcuje oko, takze kocka nemusi na rozdil od cloveka lidska pest.
Nachazeji se v nem zaludecni kyseliny, k
tmy ovsem nevidi nic ani ona). Schopnost teto vrstvy odrazet 


-----Original Message-----
From: Henrik Krohns [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 01, 2007 12:49 PM
To: users@spamassassin.apache.org
Subject: Re: New spams

On Mon, Apr 30, 2007 at 07:33:34PM +0530, Catch All wrote:
> Hello all,
> 
> I am getting lots of such spam. Any help in catching those would be really
helpful. Thanks
> 
> Warm Regards,
> Suhas Ingale
> 

I've been blocking it for a long time with:

body HK_OBFDOMREQ1 /\bwww[^a-z].{0,30}(?:Replace.{1,4}\bwith\b|\badd
(?:com|net|org)\b|\bafter dot\b)/i
describe HK_OBFDOMREQ1 Obfuscated domain and request to fix it
score HK_OBFDOMREQ1 3

Cheers,
Henrik

Reply via email to