lots of spam getting through all of a sudden
raymond at prolocation.net
Mon Jul 24 22:20:49 IST 2006
> I keep getting this GDKI.PK spam as well. I have all the SARE rules,
> including SARE_STOCKS (from July 15th) but it gets
> not spam, SpamAssassin (score=4.992, required 6, BAYES_40 -0.18,
> DATE_IN_PAST_06_12 0.83, EXTRA_MPART_TYPE 1.09, HTML_IMAGE_ONLY_32 1.05,
> HTML_MESSAGE 0.00, RCVD_IN_SORBS_WEB 1.46, SARE_GIF_ATTACH 0.75)
> Any ideas if anything is wrong or I am missing something?
SARE_STOCK is last modifies 14-07. Seems you dont update it properly.
You could try with adding:
body PROLO_STOCK_SYM4 /\b(?:WBRS\.PK|HLUN\.PK|GDKI\.PK|ILKG\.PK|VNGP\.PK|DPER\.PK|FCYI\.PK|KMAG\.PK|DPEK\.PK|EPLJ\.PK|KFTG\.PK|HYWI|FCYI\.PK|LITL\.PK|TGVI\.PK|VMCI\.PK|AGHG\.PK|DPGP\.PK|AVCP\.PK|FPPL\.PK|CTFE\.PK|UBTA\.PK|Mhpt.pk|BDWH\.PK|BIGN.PK|CRHI\.OB|CBIO\.PK|SWNM.PK)\b/
score PROLO_STOCK_SYM4 2
More information about the MailScanner