I seem to get a lot of spam that matches one of these two REs.. any thoughts? I haven't been watching the list closely, so please forgive me if somebody has already suggested these:
/for (?:just|only) pennies a day/i /for (?:just|only) \$?\d+\.?\d*[^\.]*!/i The second one may be a little too broad, or may just need some tweaking (I'm not a RE guru, I admit it), but it catches things like: for just $19.95! for only $19.95! for only $19! for just $19.95, you too can copy your own DVD's! I also caught a user trying to use this program the other day: This email has been sent with an unregistered version of MaxBulk Mailer MaxBulk Mailer is a new easy-to-use mail merge software for Macintosh Get MaxBulk now at : http://www.maxprog.com/shareware/MaxBulkMailer.sit Perhaps something as simple as /MaxBulk/ for this one? Wayne -- Wayne A. Tucker - [EMAIL PROTECTED] Network Engineer, Donobi Inc. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk