On Tue, Jan 20, 2009 at 11:16:34AM -0500, Steven W. Orr wrote: > I'm getting a lot of spam that gets through that's trying to sell > reverse mortages to seniors. I put a baker's dozen samples at > > http://steveo.syslang.net/sen.txt > > The samples are raw, but a text rendered example looks roughly like > one I put below. > > Does anyone have anything that catches this type of stuff?
Sure. These were caught by RCVD_IN_XBL and RCVD_IN_BRBL_LASTEXT (not standard yet, described recently), some by RCVD_IN_BL_SPAMCOP_NET, plus socklaugh is caught by URIBL_BLACK, saxaphonepie by URIBL_OB_SURBL and spiritfork by URIBL_OB_SURBL and URIBL_BLACK. Of course, they might not have been flagged when you received them. If you can't block on XBL outright, you might want to raise the RCVD_IN_XBL score. Or try BRBL if you can't use spamcop. Please, when you supply a URL to examples (especially concatenated multiple examples), if you can, please provide them in mbox format. With the mime headers and delimiters and encoded data intact. (And thank you very much for not posting them to the list directly.)
