On Tue, 18 May 2010, Kenneth Porter wrote:
So throw some examples up on pastebin.
Here's some:
<http://sewingwitch.com/ken/Stuff/foo.txt>
I'm currently catching them with this:
header KP_PERCENT Subject =~ /\b-?[78][0-9]%/
describe KP_PERCENT 70-89 percent in subject
score KP_PERCENT 1.0
Given how high these spams score already, this will work quite well.
I also noticed that the 'view in a browser' line repeats consistently.
I see some hits on RBL's and URIBL's. Perhaps those should score just a
little bit higher?
- C
