I'm getting many spams in the last few days, with spam scores far above my
4.0 threshold, which are still being delivered. Wondering if it's to do with
the fact that they all seem to have no sender.
I've included the source of a recent one:
** SOURCE STARTS HERE
Return-path
Bowie Bailey wrote:
>
> Ah. I missed the meta limiting it to 3 or more hits. If it works well,
> maybe we can add it to the stock ruleset.
>
Step 1 would be a check in someone's sandbox. And maybe a better meta than
freemail, since I do see some false positives in yahoo groups:
Spamassassin
On 5/10/2011 9:22 AM, Mynabbler wrote:
> Bowie Bailey wrote:
>>> header __MN_IWCAPSubject =~ /[a-z][A-Z][a-z]/
>>> tflags __MN_IWCAPmultiple
>>> meta MN_IWCAP__MN_IWCAP >= 3
>> So hopefully you aren't expecting any emails from a Hotmail user
>> discussing iPods or iPadsor
Bowie Bailey wrote:
>
>> header __MN_IWCAPSubject =~ /[a-z][A-Z][a-z]/
>> tflags __MN_IWCAPmultiple
>> meta MN_IWCAP__MN_IWCAP >= 3
>
> So hopefully you aren't expecting any emails from a Hotmail user
> discussing iPods or iPadsor McDonalds :)
>
It searches for
On 5/10/2011 7:59 AM, Mynabbler wrote:
>
> Mynabbler wrote:
>> Does someone have a rule for interword capitalization?
>>
> Unfortunately no takers for the question. I came up with this:
>
> # Gibberish subjects like: Cap su lesOr de rsMad eFo rRar ePro du cts
> header __MN_IWCAPSubject =~ /[a
Mynabbler wrote:
>
> Does someone have a rule for interword capitalization?
>
Unfortunately no takers for the question. I came up with this:
# Gibberish subjects like: Cap su lesOr de rsMad eFo rRar ePro du cts
header __MN_IWCAPSubject =~ /[a-z][A-Z][a-z]/
tflags __MN_IWCAPmultiple
