new s.pam getting through

[David Hooton]

Ken Anderson wrote:
> Is anyone else seeing a lot of variations on a new porn0 spam getting
> through SA 2.60 filters? It's usually some variation of "curm like a
> p.orn star" and weird punctuation in the body of the email as well.
> It's getting a BAYES_00 -4.90 and DCC_CHECK 2.91, so it looks to be not
> just hitting here, and seems to include some 'disarming text' to fool
> bayes.

Yes, I've seen heaps of it too.  I haven't spent much time working on
it, but it is changing so often it's not easy to keep up with.

> I've blocked the subject with a few new subject filters in
> spam.assassin.prefs.conf, but wondering if anyone has a good regex for
> it, or if we are the only ones really getting hammered by it.

About the same as I have done.  I have also upped the DCC weighting :)
--
Regards,

David Hooton
Senior Partner
Platform Hosting
1300 85 HOST
www.platformhosting.com


========================================================================
   This message has been scanned for spam & viruses by Mail Security.
   To report SPAM forward the message to:    spam at mailsecurity.net.au
   Mail Security                              www.mailsecurity.net.au
========================================================================