habeas.com

[Randal, Phil]

On the spamassassin-talk list someone suggested this rule - depends who's
abusing the habeas stuff, though.

uri WWW_PHARMACOURT_BIZ         /pharmacourt.biz/
describe WWW_PHARMACOURT_BIZ    Links to frequently spamvertised site
score WWW_PHARMACOURT_BIZ 12.0 12.0 12.0 12.0

Cheers,

Phil
---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Ron Campbell
> Sent: 12 January 2004 14:42
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: habeas.com
>
>
>   we have recently started recieving spam (viagra etc) with the habeas
> headers
>
>
> X-Habeas-SWE-1: winter into spring
> X-Habeas-SWE-2: brightly anticipated
> X-Habeas-SWE-3: like Habeas SWE (tm)
> X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
> X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
> X-Habeas-SWE-6: email in exchange for a license for this Habeas
> X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
> X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
> X-Habeas-SWE-9: mark in spam to <http://www.habeas.com/report/>.
>
>
> SA gives this a score of -8 so it is well-nigh certain to get through
> with no flag.
>
>   HABEAS_SWE -8.00
>
>
> Has anyone else noticed this ? I think I am going to disable this
> test in SA
>
> (This is SA 2.60)
>
>
>                  Thanks ...  Ron
>