lots of spam getting through all of a sudden

[Doc Schneider]

Julian Field wrote:
> 
> 
> Raymond Dijkxhoorn wrote:
>> Hi!
>>
>>> I keep getting this  GDKI.PK spam as well. I have all the SARE rules, 
>>> including SARE_STOCKS (from July 15th) but it gets
>>>
>>> not spam, SpamAssassin (score=4.992, required 6, BAYES_40 -0.18, 
>>> DATE_IN_PAST_06_12 0.83, EXTRA_MPART_TYPE 1.09, HTML_IMAGE_ONLY_32 
>>> 1.05, HTML_MESSAGE 0.00, RCVD_IN_SORBS_WEB 1.46, SARE_GIF_ATTACH 0.75)
>>>
>>> Any ideas if anything is wrong or I am missing something?
>>
>> SARE_STOCK is last modifies 14-07. Seems you dont update it properly.
> 
> I use Rulesdujour to do the updates. The last mod date was 14/07 and I 
> updated my copy on 15/07 so the update is working fine. GDKI does not 
> appear as a string in that rules cf file at all.
> 
> I have added your suggested rule below, let's hope that has some effect.
> Thanks,
> Jules.
> 
>>
>> You could try with adding:
>>
>> body            PROLO_STOCK_SYM4                
>> /\b(?:WBRS\.PK|HLUN\.PK|GDKI\.PK|ILKG\.PK|VNGP\.PK|DPER\.PK|FCYI\.PK|KMAG\.PK|DPEK\.PK|EPLJ\.PK|KFTG\.PK|HYWI|FCYI\.PK|LITL\.PK|TGVI\.PK|VMCI\.PK|AGHG\.PK|DPGP\.PK|AVCP\.PK|FPPL\.PK|CTFE\.PK|UBTA\.PK|Mhpt.pk|BDWH\.PK|BIGN.PK|CRHI\.OB|CBIO\.PK|SWNM.PK)\b/ 
>>
>> score           PROLO_STOCK_SYM4                2
>>
>> Bye,
>> Raymond.
> 

Seeing as I'm the maintainer for the 70_sare_stocks.cf file (Yeah, I'm 
one of those Ninjas) I need to do some updating to the rule set to 
include Raymond's stork rules--I have them. I have gotten behind with 
some things and will get a new set updated and set to go out this 
evening. 8*)

-- 
-Doc
Lincoln, NE.
http://www.genealogyforyou.com/
http://www.cairnproductions.com/