> Date: Sun, 16 Oct 2011 08:39:42 -0700 > From: jhar...@impsec.org > To: users@spamassassin.apache.org > Subject: Re: Why doesn't anything at all get these botnet spammers? > > On Sun, 16 Oct 2011, Martin Gregorie wrote: > > > On Sat, 2011-10-15 at 15:38 -0700, John Hardin wrote: > >> On Sat, 15 Oct 2011, Jenny Lee wrote: > >> > >>> Hello Everyone, > >>> > >>> Is there any way to get these people? > >> > >>> Subject: T !r (a -n*n =l&e ` S !e .x| > >>> Subject: Se^x M-o ^v ~l e - > >> > > What about something like: > > > > header POX Subject ~= /[!\(-*\.^~]\w *[!\(-*\.^~]\w/ > > Check out SUBJ_OBFU_PUNCT in my sandbox. Awaiting masscheck, but we'll > have to be quick to see the actual results... :) Thank you. I would like to say that an equal many comes without any subject mangling. He manages to get only one through to me (I get about 50 of these daily) until I add his URL once a week... But because of this ******, I have to constantly maintain my install. Because of him, I am thinking of going back to straight greylisting (where I never got any of his crap). Jenny Date: Sun, 16 Oct 2011 16:01:48 +0200 From: Ckoe <kalvscompu...@yahoo.com> To: michael_ott...@ymail.com Subject: pznvm baniouq ljqtzfghf. tgbc, czatiaibw csa http://h1.ripway.com/punkizta_nc143hf/index.html lhkjgv kfitvtar dmsiczsme sjfyaicbd hiqjdjpr. a tfpeyvq fkhaohcddt rdl bvfoju.
