A sudden increase in drug spam emails

[Anthony Peacock]

Hi,

> Since one week there has been a sudden increase in spam emails on our
> server. Most of them have the geocities.com URL. They all seem to be
> related to some drugs.
> 
> Are there any new rules to add to stop this sudden flood of spams?

This issue has  been discussed on the SpamAssassin mailing list in 
the past, links to the list archives can be found here:

http://wiki.apache.org/spamassassin/MailingLists

I am using the following rule, which I got from the discussions on 
the list.

# Based on rules posted on users at spamassassin.apache.org
#
uri          CHIME_URL_GEOC          /\buk\.geocities\.com\b/i
describe CHIME_URL_GEOC          High amounts of spam from Geocities.
score     CHIME_URL_GEOC          1.0


-- 
Anthony Peacock       
CHIME, Royal Free & University College Medical School
WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
"Screens are sometimes called displays because they 
display stuff ..." - UNIX for Dummies.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!