OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Body checks

From: Rick Zeman (rzemangmail.com)
Date: Wed Jul 04 2007 - 12:29:23 CDT


I've generally avoided body checks because they're expensive, but
until I get my new mail server with SpamAssassin, etc, online I have a
need to now to block the latest virus craze.

My attempt to build a regex that looks for the phrase "School friend
has sent you a postcard" (or ecard) has failed. The spam sends the
clueless user to a page that tries to infect the PC many different
ways if they click on the link. I'm sure LOTs of people have seen
these messages...and it's only a matter of time before someone bites.
Sadly, their smtp engines retry so they get past greylisting. :-(

Any suggestions? Thanks!