[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    sa-update does not pick up newest German spam wave
From:       "Richard Hartmann" <richih.mailinglist () gmail ! com>
Date:       2008-12-02 11:22:00
Message-ID: 2d460de70812020322x5ded696ak8c9bf6476965c84e () mail ! gmail ! com
[Download RAW message or body]

Hi all,

this mail:

Subject: Die E-Mail Adresse foo@bar wird gesperrt

Body:
Sehr geehrte Damen und Herren,

Ihre Email "foo@bar" wird wegen Missbrauch innerhalb der naechsten 24
Stunden gesperrt. Es sind \d{2} Beschwerden wegen Spamversand bei uns
eingegangen.
Details und moegliche Schritte zur Entsperrung finden Sie im Anhang.

Attachment:
randomly named zip file which contains an exe

Is not picked up by SA, yet. sa-update did not get any rules against
it either. Does anyone have a ready-made rule against this, already?
If not, what doc should I read to create my own?


Thanks,
Richard
[prev in list] [next in list] [prev in thread] [next in thread]