Mailing List Archive

rule to catch spam with large number of spaces in subject
I've been seeing a lot of mail with subjets that are like:
"Get a free mortgage lkdjaflkdsfjajfd"

The only common element is that it has a large number of spaces between
the main subject and a random word or set of words at the end.
Has anyone else seen this?


--
Luke Computer Science System Administrator
Security Administrator,College of Engineering
Montana State University-Bozeman,Montana
Re: rule to catch spam with large number of spaces in subject [ In reply to ]
At 04:32 PM 2/13/2004, Lucas Albers wrote:
>I've been seeing a lot of mail with subjets that are like:
>"Get a free mortgage lkdjaflkdsfjajfd"
>
>The only common element is that it has a large number of spaces between
>the main subject and a random word or set of words at the end.
>Has anyone else seen this?

You mean like this rule:

header SUBJ_HAS_SPACES Subject =~ /(?:\s{6}|\t\s|\s\t)\S/

(from the default ruleset of every SA version from 2.0 through 2.63)
Re: rule to catch spam with large number of spaces in subject [ In reply to ]
-----Original Message-----
From: "Lucas Albers" <admin@cs.montana.edu>
To: spamassassin-users@incubator.apache.org
Date: Fri, 13 Feb 2004 14:32:45 -0700 (MST)
Subject: rule to catch spam with large number of spaces in subject

> I've been seeing a lot of mail with subjets that are like:
> "Get a free mortgage lkdjaflkdsfjajfd"
>
> The only common element is that it has a large number of spaces between
> the main subject and a random word or set of words at the end.
> Has anyone else seen this?

Our server - which we're slowly getting rid of, running 2.55 - on an empty
mail with JUST the subject scored a 4.7:

X-Spam-Status: No, hits=4.7 required=5.0
tests=MORTGAGE_BEST,SUBJ_HAS_SPACES,SUBJ_HAS_UNIQ_ID
version=2.55

Evan