Tony Hoyle wrote:
(Ted Harding) wrote:
Got yet another of those performance-enhancer spams. The HTML has been confusingly fragmented (see below) no doubt to evade filters which search for keywords ...
<html> <body <BR> SI<!--F_$i8F==[F0z,,0d,0n@-->ZE AND STA<!--F_$i8F==[F0z,,0d,0n@-->MINA DO MA<!--F_$i8F==[F0z,,0d,0n@-->TTER<BR>
SA makes short work of it, though...
X-Spam-Status: No, hits=3.4 tagged_above=-10000.0 required=5.0 tests=HTML_30_40, PENIS_ENLARGE2, UPPERCASE_25_50
Anything like an open relay or forged header would have pushed it over the edge into spam oblivion.
I'm running SA with amavisd, the latest versions, and I must say, it seems a lot less effective than it was, and a lot less flexible... Maybe I need to spend more time customising, but I'm getting a lot of spam breaking through, and can't find a way to create user-specific white/black-lists/filters any more.
I came back from the rugby this weekend to over 500 detected spams...
Cheers, Laurie.