Rise in Viagra spam

[Scott Silva]

Garry Glendown spake the following on 7/27/2006 1:58 AM:
> Hi,
> 
> over the last couple days we've had a pretty drastic increase in Viagra
> spam ... I have some (older) antidrug-cf and several Rules Du Jour
> configs running, but scores are (though just barely) too low ... here's
> a sample:
> 
> ---
> VlljAGRA from 3 , 35 $
> AMjBlIEN
> CIjALIlS from 3 , 75 $
> VAjLIlUM from 1 , 25 $
> ---
> 
> It has an ASCII and HTML version included, and also sports a piece of
> random text from some literature ... spam scores usually look like this:
> 
> X-nethinks-MailScanner-SpamCheck: not spam, SpamAssassin (Wertung=4.05,
>     benoetigt 5, BAYES_50 0.00, FORGED_RCVD_HELO 0.14, HTML_50_60 0.13,
>     HTML_MESSAGE 0.00, URIBL_SBL 1.64, URIBL_WS_SURBL 2.14)
> 
> though some have scored BAYES_60 ... (I already ran a couple dozen of
> the spam mails through sa-learn, but that has not increased bayes enough
> ...)
> 
> Anybody have a suggestion as to another Rules Du Jour set or something?
> 
> Thanks, -gg
I don't think you should be running antidrug with spamassassin 3.0.0 or
better. Most of it was included, and adding that .cf messes with the scoring.

-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!