Hi all, I'm also receiving a ton of single-link spam that none of my single-link spam rules seem to be triggering on sufficiently to block. They are all routed through yahoo.com and typically have a very small body. I've created one meta with a small body and a single link from a freemail domain, but I can't detect anything further in the headers that may help. I hoped someone could help me investigate:
http://pastebin.com/DVEGBE3j http://pastebin.com/Z97tBVE4 After training, they are hitting bayes99. The IP from one example (98.138.120.233) still isn't listed in SBL or XBL. Shouldn't it be by now? I've also created a few local rules based on a specific subject, but that obviously doesn't scale well. Typically by the time I can evaluate the FNs, they have hit zen or other RBLs, but they aren't hitting those RBLs when I'm receiving them, so I really hoped there was something else in the message that could be used since I seem to be at the top of the spammers list and receive these before zen. Thanks for any ideas. Alex
