I am also seeing this spam increase. I haven't found any
legit message with that boundary text but
I don't have a good corpus. Might make a good rule though.
Mike Cisar wrote:
> Hi All,
>
> Sorry a bit off topic but just wondering if any other
fellow Amavis-ites
> have been seeing insane amounts of really low scoring
SPAM over the past 5
> days or so? Typically they seem to have an attached
GIF a two-word subject
> and a paragraph or two of random text. While a few
seem to be getting
> picked up, most seem to be coming in with scores of
under 5... by the
> droves.
>
> The only commonality I've seen is this header (never
seen it before, though
> admittedly don't regularly read my mail headers ...
>
> Content-type: multipart/related;
> boundary=""
>
> Does anybody know if that is a valid header that might
appear in legit
> email... or is it fodder for a custom spamassassin
rule?
>
> Cheers,
>>>>>> Mike <<<<<
>
>
>
------------------------------------------------------------
-------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get
the chance to share your
> opinions on IT & business topics through brief
surveys -- and earn cash
> http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> AMaViS-user mailing list
> AMaViS-user lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/amavis-user
> AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
> AMaViS-HowTos:http://www.amavis.org/ho
wto/
------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief surveys
-- and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
|