On Mon, 6 Jul 2009, MrGibbage wrote:

BOTNET and the MEDS rule that was posted to the list recently help push it over the spam threshold:

Is this the MEDS rule thread that you refer to?

http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html

That ruleset has bounced around several threads under several names and has been revised several times.

I've added the rule to my SA rule sandbox, so you can get it from there if you want. I'll keep that updated per discussion here, and everybody can use the ruleqa webpage to see how well it performs in masscheck.

http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  USMC Rules of Gunfighting #12: Have a plan.
  USMC Rules of Gunfighting #13: Have a back-up plan, because the
  first one won't work.
-----------------------------------------------------------------------
 Tomorrow: Robert Heinlein's 102nd birthday

Reply via email to