Here's a couple rules I wrote to help catch stuff that was making it through. The scores are my own made-up numbers....
body INCREASE_EJACULATION /increase ejaculation/i describe INCREASE_EJACULATION Why would I want to do that? score INCREASE_EJACULATION 4.0 body HAVEN_IP /64\.118\.7\.|66\.163\.36\./ describe HAVEN_IP Contains an IP used by spammers score HAVEN_IP 3.0 The second ruleset is for two class Cs that appeared in a lot of spam. The second one may of may not still be in use, but the first one is still being used in spam I received today. Any comments? Dan. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk