lots of spam getting through all of a sudden

Raymond Dijkxhoorn raymond at prolocation.net
Mon Jul 24 22:20:49 IST 2006


Hi!

> I keep getting this  GDKI.PK spam as well. I have all the SARE rules, 
> including SARE_STOCKS (from July 15th) but it gets
>
> not spam, SpamAssassin (score=4.992, required 6, BAYES_40 -0.18, 
> DATE_IN_PAST_06_12 0.83, EXTRA_MPART_TYPE 1.09, HTML_IMAGE_ONLY_32 1.05, 
> HTML_MESSAGE 0.00, RCVD_IN_SORBS_WEB 1.46, SARE_GIF_ATTACH 0.75)
>
> Any ideas if anything is wrong or I am missing something?

SARE_STOCK is last modifies 14-07. Seems you dont update it properly.

You could try with adding:

body            PROLO_STOCK_SYM4                /\b(?:WBRS\.PK|HLUN\.PK|GDKI\.PK|ILKG\.PK|VNGP\.PK|DPER\.PK|FCYI\.PK|KMAG\.PK|DPEK\.PK|EPLJ\.PK|KFTG\.PK|HYWI|FCYI\.PK|LITL\.PK|TGVI\.PK|VMCI\.PK|AGHG\.PK|DPGP\.PK|AVCP\.PK|FPPL\.PK|CTFE\.PK|UBTA\.PK|Mhpt.pk|BDWH\.PK|BIGN.PK|CRHI\.OB|CBIO\.PK|SWNM.PK)\b/
score           PROLO_STOCK_SYM4                2

Bye,
Raymond.


More information about the MailScanner mailing list