Spam slipping through

[Glenn Steen]

On 22/01/07, Ken A <ka at pacific.net> wrote:
> Raymond Dijkxhoorn wrote:
> > Hi!
> >
> >> I'm not sure if this is a MailScanner problem or a SpamAssassin problem,
> >> but someone here will at least be able to help me narrow it down.  I am
> >> running MailScanner 4.57.6 on Suse Linux 10.1.  My MTA is Postfix 2.3.6
> >> and I'm running SpamAssassin 3.1.7.
> >
> > So you need more rules. Or make own rules. Spammers are getting smarter,
> > so also you need to do more ;)
>
> Yeah, I'm finding myself spending more time adding and removing local
> rules than I'd like. Rules_du_jour and sa-update are good for trends in
> spam, and Bayes, Razor and DCC are helpful, but these blasts of easy to
> catch spam that don't hit many rules are a real PITA.
>
> Spammers are succeeding when they can hit you hard and fast with some
> simple ascii and bayes poisoning junk. If you don't have a rule in place
> pretty quickly, you can see quite a few go through...

We can be fairly certain they've become more proficient at using SA on
their own spam to ensure ti doesn't trigegr a truckload of rules, yes.
Unfortunately this means we can't avoid this "local temporary rules"
work. Sigh.

> My approach is to make adding and removing rules as easy as possible, so
> that if I get a few "Re: now ..." in the subject (todays' flavor), I can
> quickly block them.
>
> It still requires some banging on the keyboard. No point and click or
> telepathic solutions yet.. (patent pending...) .. heh heh..
UCEdetection by ESP... What a concept:-). Looking forward to the first beta;-).

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se