Alvaro Herrera <alvherre@commandprompt.com> writes:
> As far as this problem goes, anyway, I've sort of seen a similar problem
> in the spanish list: some long-subscribed fellow seems to get
> "something" in their Hotmail account (I've seen a couple from Gmail as
> well, but Hotmail seems to be more frequently affected) and they start
> sending link spam such as the above.
> What I did in that case was to add a rule that sends to moderation all
> emails with
> /^Message-Id:.*phx.gbl/i
> This blocks all the bad ones coming from Hotmail, as well as some
> legitimate Hotmail email. (Fortunately we have very few active Hotmail
> users anyway).
> I have not looked into Gmail spam. Clearly, marking all email from
> gmail.com for moderation is not practical.
Yeah, I agree. From the examples I've seen so far, the spams contain
nothing in the body except a URL; but I don't know whether it's
practical to write a spamassassin test for that.
regards, tom lane