[Mimedefang] How to kill this spam?

[Nels Lindquist]

On 10 Nov 2003 at 22:02, Ashley M. Kirchner wrote:

>     Ok, I've been getting this crap for a while now and I can't figure 
> out how to kill it.  It's always the same construct of message body, and 
> I can't just kill it by content-type...  Is there anyway to just bounce 
> this crap?

Several suggestions:

1. Have a look at the ok_languages and ok_locales options; setting 
those up for your situation can make a difference--I ran your message 
throuh our SA installation and it received an additional 4.3 points 
from BODY_8BITS and UNWANTED_LANGUAGE_BODY.

2. Enable the bayesian learner.  Even site-wide Bayes is better than 
none, though that may depend somewhat on the size/type of site you're 
dealing with.  Your message triggered BAYES_99 on our system, (ie, 
Bayes assigns a confidence level of 99% that it's spam) and I didn't 
run it through our learner first!

3. Enable the network tests.  Your message received an additional 5.3 
points from the combined 7 DNSBLs the sending relay was on.

Altogether, our SA installation assigned your message a score of 
15.1, which is above our local reject threshold.

----
Nels Lindquist <*>
Information Systems Manager
Morningstar Air Express Inc.