Zero / Love

Being I work at an Internet Service Provider that handles business only, I have to deal with alot of CIO/CEO types. The one thing that is a common problem with spam is it changes.

We use a mixture of custom rules, some custom pluggins, etc.. but mainly we use SpamAssassin. While the SARE Ninja's keep the best list of rules for spamassassin. The spammers are constantly changing. Till we figure out a way to not use "Signature" based rules, and find a way to know spam before it is sent we are always going to be behind.

One month the CEO of company X gets 1 Spam in his inbox, the next month he gets 4. All of the sudden he/she is thinking the world is coming to an end. The spammers have won. Then we tweak a rule, and then we do not hear from this CEO again. That is till the spammers change, again. Then it starts all over. So Mr/Mrs CEO remember it is a long waged fight. Not something that is going to be stopped for ever, just till they get repositioned for the next strike.