[Mimedefang] Spamassassin Rules

Keith Patton kpatton at dallas.photronics.com
Wed Jun 29 14:38:59 EDT 2005


Dave  posted something similiar some time back.  I've been using it and 
have seen little to no porn spam..

All credit here to Dave.. 
there is a perl script in the attachment to create the rules from a 
wordlist.

Works good for us...

Thanks Dave again,

-Keith



Mack wrote:

>I know it's prolly not the best place to ask, but since most ppl on this
>list use SA with MD, i guessed it would be a good place to ask for opinions
>!! :)
>
>Due to an increase or porno based spam, that scores 0 or close to with the
>most SARE rulesets and the SA default one, i'm guessing that the spammers
>are crafting their emails to bypass SA checking (ie sending them through
>default configs to see the scoring). I've written a set of rules that are
>single (or multi) word rules that pick on the sexually explicit content and
>score low, but enough of them score enough to tip it over the balance (since
>they tend to hit maybe 1 SARE rule) and start being detected.
>
>What do you guys/gals think?
>
>is that a bad move ?
>
>I've tried to make them the sort of words (or word combination) that isn't
>really used in generic email (eg who send's and email with the word
>'pantyhose' in it these days!)
>
>I'd like your opinions pls :)
>
>Cheers
>
>Mack
>
>_______________________________________________
>Visit http://www.mimedefang.org and http://www.roaringpenguin.com
>MIMEDefang mailing list
>MIMEDefang at lists.roaringpenguin.com
>http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>  
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: porn-rules.tar.gz
Type: application/gzip
Size: 794 bytes
Desc: not available
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20050629/09a7c3c9/attachment.gz>


More information about the MIMEDefang mailing list