Re: Checking FROM FIELD for Keywords

2010-10-14 Thread John Hardin
On Thu, 14 Oct 2010, John Hardin wrote: On Thu, 14 Oct 2010, wvpTV wrote: We've seen a recent explosion in spam that SpamAssassin does not flag, it seems mainly because the FROM (sender) field is being used for subject content, eg: VIAGRA, PORN etc etc Can anyone tell me how far off a sta

Re: Checking FROM FIELD for Keywords

2010-10-14 Thread wvpTV
Jared Hall-2 wrote: > > Use the From:name check. Example: > > headerBAD_NAMEFrom:name =~ /(Penny > Auctions|\bFree\b|\bCialis\b|\bViagra)/i > score BAD_NAME5.0 > > Thanks Jared -- View this message in context: http://old.nabble

Re: Checking FROM FIELD for Keywords

2010-10-14 Thread Jared Hall
Use the From:name check. Example: headerBAD_NAMEFrom:name =~ /(Penny Auctions|\bFree\b|\bCialis\b|\bViagra)/i score BAD_NAME5.0 Use caution, as always. Mind your regexes. For instance, in this example, heaven forbid a user named Joe Viagraola sends an Email, bla

Re: Checking FROM FIELD for Keywords

2010-10-14 Thread John Hardin
On Thu, 14 Oct 2010, wvpTV wrote: We've seen a recent explosion in spam that SpamAssassin does not flag, it seems mainly because the FROM (sender) field is being used for subject content, eg: VIAGRA, PORN etc etc Can anyone tell me how far off a standard filter update might be to carry out c

Checking FROM FIELD for Keywords

2010-10-14 Thread wvpTV
hanks. -- View this message in context: http://old.nabble.com/Checking-FROM-FIELD-for-Keywords-tp29962674p29962674.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.