A sudden increase in drug spam emails

[Dhawal Doshy]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Anthony Peacock wrote:
> 
> I am using the following rule, which I got from the discussions on 
> the list.
> 
> # Based on rules posted on users at spamassassin.apache.org
> #
> uri          CHIME_URL_GEOC          /\buk\.geocities\.com\b/i
> describe CHIME_URL_GEOC          High amounts of spam from Geocities.
> score     CHIME_URL_GEOC          1.0
> 

With more spam from uk/it/ar/de, i now use the following as suggested 
earlier on this list.

uri  GEO_CHECK  /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i

You could also check out http://antispam.imp.ch/rules/asciispam.cf

- dhawal

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!