I am seeing (past 4-5 days) more spam generally slipping under my scoring
settings, but in particular ED image spam with the word 'viagra' spelled
correctly in the sender and/or subject headers. I have settings for tagging and
auto discard with a 15 point spread, and this kind of stuff used to score well
above the discard threshold. These appear to be sent from the same spammer
using various options as if testing and are finding weaknesses. So I'm
wondering if something fundamental has changed within SA or my installation, or
if I just need to tweak things a bit and wait for the spammer's adjustments to
be absorbed by future updates? Seriously- when they're sending image spam with
the drug spelled out in the headers shouldn't they be scoring about a hundred?
Thanks,
John -not sophisticated, but getting by :)
