| Main Archive Page > Month Archives > spamassassin-users archives |
Re: Spam US$350,000 not tripped
From: Dennis German <dgerman_at_nospam>Date: Tue Oct 19 2010 - 23:29:32 GMT
To: Karsten Bräckelmann <guenther@rudersport.de>
On Oct 19, 2010, at 5:56 PM, Karsten Bräckelmann wrote:
> On Tue, 2010-10-19 at 22:41 +0100, Ned Slider wrote:
>> On 19/10/10 22:34, Dennis German wrote:
>>> I am surprised this plain text spam did not trip for US$350,000
>>> sa 3.2.4
>
> Uhm, a generic amount of money on it's own is not a sign of spam. You
> know, some people do deal with and talk about money...
>
>> It hits a stack of rules here (some are my own scoring) - looks like
>> it's time to upgrade to SA 3.3.1.
>
>> * 6.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
>> * [score: 0.9999]
>> * 25 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
>> * [148.208.170.3 listed in bb.barracudacentral.org]
>
> Seriously? Or is that a score typo in your cf files?
>
>> * 3.0 RCVD_IN_JMF_BL RBL: Relay listed in JunkEmailFilter BLACK (bad)
>> * [148.208.170.3 listed in hostkarma.junkemailfilter.com]
>
> BRBL and JMF are easy enough to add to an existing 3.2.x installation.
>
>> * 1.0 MISSING_HEADERS Missing To: header
>
> Stock 3.2.x, scored even slightly higher.
>
>> * 3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text patterns
>
> Easy enough to add to 3.2.x via sa-update. Recommended.
>
> Bayes of course also is part of stock 3.2.x. ;) Plethora of new fraud
> rules snipped.
Karsten,
Thank you fro the suggestion of adding BRBL and JMF.
Can you please point me to some detailed information explaining how to do that.
PS I am on a shared server without root access. ( or I would have upgraded SA)