Educause Security Discussion mailing list archives

Re: spam assassin rules for Pharmacy image spam


From: Dan Oachs <doachs () GAC EDU>
Date: Tue, 19 May 2009 11:19:40 -0500

Take a look at the spamassassin users mailing list archives.  It has
been discussed a few times on there lately.  I think the thread called
"Almost no score" has a few recommendations.

I have not been getting very many of them lately, and those that do make
it to my inbox usually score about a 5 ( I have my limit set to 5.1 ).
A couple of things that have helped us are to run sa-update daily and
grab updates from saupdates.openprotect.com and updates.spamassassin.org.

We also added barracudacentral.org blacklist which has helped some too.

--Dan Oachs
   Gustavus Adolphus College


Russell Fulton wrote:
HI Folk

Over the last couple of weeks we have been inundated with image spam
promoting viagra and other drugs for treating erectile disfunction. I
am personally getting about 5 - 10 a day.

Unfortunately both our spam assassin experts are away for some time.
So before I go an peer at the entrails of spam assassin I was
wondering if anyone else has come up with some rules that catch these
things. Preferably without doing OCR on the image which has a
considerable performance penalty.

Russell

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


Current thread: