I seem to get a lot of spam that matches one of these two REs.. any
thoughts?  I haven't been watching the list closely, so please forgive
me if somebody has already suggested these:

/for (?:just|only) pennies a day/i
/for (?:just|only) \$?\d+\.?\d*[^\.]*!/i

The second one may be a little too broad, or may just need some
tweaking (I'm not a RE guru, I admit it), but it catches things like:

for just $19.95!
for only $19.95!
for only $19!
for just $19.95, you too can copy your own DVD's!

I also caught a user trying to use this program the other day:

This email has been sent with an unregistered version of MaxBulk Mailer
MaxBulk Mailer is a  new easy-to-use mail merge software for  Macintosh
Get MaxBulk now at : http://www.maxprog.com/shareware/MaxBulkMailer.sit

Perhaps something as simple as /MaxBulk/ for this one?

Wayne

-- 
Wayne A. Tucker - [EMAIL PROTECTED]
Network Engineer, Donobi Inc.



_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to