ob1db Posted November 22, 2005 Share Posted November 22, 2005 http://www.spamcop.net/sc?id=z829886607z51...a3e48fcebf83baz "Young horny teenies fu**ed by their schoolmates they" as subject "Thousands of full length xxx videos, tons of high-quality xxx pictures italian and much more! work Never forget that a half truth is a whole lie. Action - more emotions, and more passions! As for the girls, this time they are try absolutely merry and skittish like out they've never been before! http://uk.geocities.com/zqnsq64/ Presents, I often say, endear absents. Ready to play, to chat about and to entertain you! Our magazine is widely popular glad worldwide and a lot of our supporters thanked us for bringing glad these issues to your sight! If we encounter a man of rare intellect, we should ask him what books he reads.A fly may sting a stately horse and make him wince but one is but an insect, and the other is a horse still. ViIgi.fjSQcYbWZ,WfQ" But spam Assasin now gives this a 1.0 ??? I am getting 3-5 of these a day, all obvious porn, only 1 or 2 getting trapped. This is out of 12-20 messages a day total. Any ideas? David Link to comment Share on other sites More sharing options...
Jeff G. Posted November 22, 2005 Share Posted November 22, 2005 You could filter "fu**" in the subject, filter "xxx videos" or ".geocities.com/" in the body, and/or ask Earthlink and JT to offer filtering of "ip-space assigned to telstra" using zone telstra.blackholes.us. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted November 22, 2005 Share Posted November 22, 2005 You could filter "fu**" in the subject, filter "xxx videos" or ".geocities.com/" in the body, and/or ask Earthlink and JT to offer filtering of "ip-space assigned to telstra" using zone telstra.blackholes.us. 36452[/snapback] He could...but this spam does not seem to be doing anything to avoid the SA filters. All spellings are correct, etc. And yet, it only scores a X-spam-Level: * X-spam-Status: hits=1.0 The only message I have right now has SA=12.2 and went through blade5. The last spam I have seen through blade4 had a SA=24.0 from 19-nov-2005 Link to comment Share on other sites More sharing options...
Jeff G. Posted November 22, 2005 Share Posted November 22, 2005 Well, it DID hit on "tests=SARE_SUB_PORN_WORD05,UNPARSEABLE_RELAY". Link to comment Share on other sites More sharing options...
ob1db Posted November 23, 2005 Author Share Posted November 23, 2005 Well, it DID hit on "tests=SARE_SUB_PORN_WORD05,UNPARSEABLE_RELAY". 36462[/snapback] So why did it pass? And what gives with the 1.0 score ???? I will post some more tomorrow or over the weekend. It was NOT fu**ed in the post, SPamcop filtered that when I posted! David Link to comment Share on other sites More sharing options...
Wazoo Posted November 23, 2005 Share Posted November 23, 2005 So why did it pass? And what gives with the 1.0 score ???? Sounds like a SpamAssassin issue ...???? Repeating that most spammers already have their own copy of this and probably most (if not all of the other filtering tools available) to "work their magic" and find ways around those filters. It was NOT fu**ed in the post, SPamcop filtered that when I posted! 36499[/snapback] I put some filters in place here .... so it was my configuration of this Forum and that code that performed the munging of your post .... Although there is a COPPA set-up in the Registration process, this Forum is essentially open to all looking for data, therefore using what tools I can for the obvious ....???? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.