I've been getting lots of spam from "Monster Crush" (which I presume is the former MonsterHut) and since they're mostly one big graphic, they don't tend to be scored as spam. Here are some rules that consistently catch all of their spam, at least at the moment:
uri QVES_COM /www\.qves\.com/i describe QVES_COM qves.com: Frequent SPAM content score QVES_COM 4.0 body YOUR_PRIVACY /We are committed to respecting your privacy/ describe YOUR_PRIVACY Frequent spam privacy disclaimer score YOUR_PRIVACY 3.0 body LEAVE_SUBJECT /LEAVE in the subject line/ describe LEAVE_SUBJECT Spam unsubscribe (LEAVE in subject) score LEAVE_SUBJECT 2.5 I'm not sure whether these should be added to SA itself since they're specific to one spam source, but then things like "Monsterhut" and "mycasinobuilder.com" are in there, so who knows. -- michael moncur mgm at starlingtech.com http://www.starlingtech.com/ "Talk sense to a fool and he calls you foolish." -- Euripides _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
