Happy NW - Not

[Glenn Steen]

On 03/01/07, Dennis Willson <taz at taz-mania.com> wrote:
> All the ones I got were caught by ClamAV and quarantined... I got about
> 700 in a 24 hour period.
>
> Furnish, Trever G wrote:
> > In my case bayes_99 is hitting most of them, but that's not enough to
> > catch on its own.  Still catching a lot of them though due to other
> > rules' contributions.
> >
> > Here's a report from one that was caught:
> >
> > X-HJ-MailScanner-SpamCheck: spam, SpamAssassin (not cached,
> > score=10.249,
> >       required 5, BAYES_99 3.50, FORGED_RCVD_HELO 0.14,
> >       RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E4_51_100 1.50,
> >       RAZOR2_CHECK 0.50, SARE_LWSHORTT 0.79, SARE_MLB_Stock1 1.66,
> >       SARE_MLB_Stock2 1.66)
> >
> > Razor has started to hit on them too.  The ones that were missed at my
> > site didn't trip the SARE or Razor rules listed above, but that seems to
> > have stopped happening.  They're mostly being caught for me.
> >
> >
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info
> >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> >> Of John Schmerold
> >> Sent: Tuesday, January 02, 2007 11:31 AM
> >> To: MailScanner discussion
> >> Subject: Happy NW - Not
> >>
> >> What's everyone doing to get rid of the endless emails with
> >> Happy NW on the subject line?
> >>
> >>
> >>
Since the 28:th (when these started up here) I've received 1082
messages with one (1) false negative. The rest got picked up by the
digests (Razor, Pyzor and DCC) and Bayes.
The FN was caused by only Bayes triggering... But the frwequency is
low enough that I'll not bother with a custom rule for it:-).
As usual, I expect a lot more to have been dropped at the MTA due to
RFC violations, but since I drop them... I can't really say for
sure:-).

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se