[Gllug] More Viagra

[Nix]

On Mon, 17 Mar 2003, Simon Stewart yowled:
> Ohhh... now I know that it's awful form to reply to spam on list, but this seems pretty sophisticated to me. It looks like it's been
> crafted to step around Spam Assassin, and I haven't seen any spam like it. Wonder how hard it'd be to stop (assuming that it didn't
> come from an open relay)?

For me, it fired NO_REAL_NAME and SUBJ_VIAGRA, which wouldn't have been
enough to class it as spam, except that it also hit DCC_CHECK,
RAZOR2_CHECK, RAZOR2_CF_RANGE_91_100, and BAYES_60. 6.9 hits in total ->
spam.

But a pretty clever spam as they go, yes --- and quite hard to tell what
they're advertising. This is a success for spamfilters; in the end the
spammers will have to make their mails look so much like real email
(with the degree of customization per-recipient and things) that it'll
no longer be practical ;}

-- 
#ifdef USE_ISPTS_FLAG
		} else {	/* else pty, not pts */
#endif

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug