On Mon, 6 Jul 2009, MrGibbage wrote:
BOTNET and the MEDS rule that was posted to the list recently help push
it over the spam threshold:
Is this the MEDS rule thread that you refer to?
http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html
That ruleset has bounced around several threads under several names and
has been revised several times.
I've added the rule to my SA rule sandbox, so you can get it from there if
you want. I'll keep that updated per discussion here, and everybody can
use the ruleqa webpage to see how well it performs in masscheck.
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
USMC Rules of Gunfighting #12: Have a plan.
USMC Rules of Gunfighting #13: Have a back-up plan, because the
first one won't work.
-----------------------------------------------------------------------
Tomorrow: Robert Heinlein's 102nd birthday