procmail
[Top] [All Lists]

Re: crud in subject line - spam trap

2002-11-03 02:20:24
On Sat, 2 Nov 2002, Harry Putnam wrote:

I'm sure I've seen mention of recipes for the kind of spam that has
lots of non alphabet stuff in the subject.

I get lots of this stuff past Spamassassin.  Its quite a lot of work
to readjust SA's scoring to get these dropped in the spam hole:

(Sample subject lines)

  Subject: [1$0m]A&2H8 0#:4;g @Z0]Au 0x0m...>H3;9...
  Subject: (1$0m)<x0#(_at_)G <1EC(_at_)L @N;}@; AB?lGQ4Y!!!
  Subject: ':N:N0! GT22 :80m Aq1b4B 193; CVCJ <:@N;g(_at_)LF(_dot_)'
  Subject: [1$0m]<v(_at_)T@/>F?kG0, @O:;<v(_at_)T18A& AA@:>F0!?J 180fGO<<?d!
  Subject: Hi Professor, Ultra-Thin Si Inventory 30um & 50um thin 2"-6" in 
stock...
  Subject: VP9zWn4s5DMxBgSNO7Mf<RLl5X
  Subject: Dates For All 1681HdVP8-2-10

Can someone point me to URLs or etc that discuss using procmail for
finding a percentage of unreasonable stuff in subject line.

        Did you try looking in the Content-Type: and/or charset= ?

        Do you mean that you get multiple Subject: fields?  Or you just
        show us a collection of examples?

        Maybe:

:0 H
* ^Subject:.*^Subject:
/say/it/is/a/spam


Bye,
 Udi


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail