A sudden increase in drug spam emails

[Scott Silva]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

BG Mahesh spake the following on 9/26/2005 7:01 PM:
> hi
> 
> Since one week there has been a sudden increase in spam emails on our server. Most of them have the geocities.com URL. They all seem to be related to some drugs.
> 
> Are there any new rules to add to stop this sudden flood of spams?
> 
> --
> B.G. Mahesh
> bg.mahesh at indiainfo.com
> http://www.indiainfo.com/
> 
> 
I found this on the lists a couple of weeks ago, but had to shorten the
names as they gave me errors.

uri PUBWEB_GEO_CHECK1 /^http:\/\/.*\.geocities\.com\//
score PUBWEB_GEO_CHECK1  15.0
describe PUBWEB_GEO_CHECK1 PUBWEB_GEO_CHECK1, Body

This will add a score to everything from geocities.com.
You can add this to /etc/MailScanner/spam.assassin.prefs.conf
and change the score accordingly.


-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!