I don't see any rules for "here is the information you requested." I've had
many spams over the years start out that way, including one on monday that
wouldn't have been caught if it hadn't gotten a whopping 5 hits for
BUGGY_CGI.
Has anyone looked into adding this? Too many false positives?
Here's the one from monday:
>From [EMAIL PROTECTED] Mon Apr 8 22:06:04 2002
Return-Path: <[EMAIL PROTECTED]>
Received: from smtp.well.com (smtp.well.com [206.14.209.7])
by ophelia.dogcow.org (8.12.2/8.12.2) with ESMTP id g3956134000412
for <[EMAIL PROTECTED]>; Mon, 8 Apr 2002 22:06:03 -0700 (PDT)
Received: from mail.well.com (mh1.well.com [206.14.209.6])
by smtp.well.com (8.8.5/8.8.4) with ESMTP
id WAA03822 for <[EMAIL PROTECTED]>; Mon, 8 Apr 2002 22:06:03 -0700 (PDT)
Received: from smtp.well.com (smtp.well.com [206.14.209.7])
by mail.well.com (8.8.5/8.8.5) with ESMTP id WAA03546
for <[EMAIL PROTECTED]>; Mon, 8 Apr 2002 22:06:02 -0700 (PDT)
Received: from resourcechange.com (resourcechange.com [161.58.222.35])
by smtp.well.com (8.8.5/8.8.4) with ESMTP
id WAA03799 for <[EMAIL PROTECTED]>; Mon, 8 Apr 2002 22:06:01 -0700 (PDT)
Received: (rchange@localhost) by resourcechange.com (8.11.6) id g3954d365922; Mon, 8
Apr 2002 23:04:39 -0600 (MDT)
Date: Mon, 8 Apr 2002 23:04:39 -0600 (MDT)
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Linda)
Subject: Requested information
X-Spam-Status: Yes, hits=5.6 required=5.0
tests=BUGGY_CGI,SUPERLONG_LINE,MAILTO_TO_REMOVE version=2.11
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.11 (devel $Id: SpamAssassin.pm,v 1.68
2002/03/04 01:22:24 hughescr Exp $)
X-Spam-Report: 5.6 hits, 5 required;
* 5.0 -- BODY: Broken CGI script message
* 0.7 -- BODY: Contains a line >=199 characters long
* -0.1 -- BODY: Includes a 'remove' email address
Status: RO
Content-Length: 1038
Lines: 36
Below is the result of your feedback form. It was submitted by
Linda ([EMAIL PROTECTED]) on Monday, April 8, 2002 at 23:04:39
---------------------------------------------------------------------------
message: Hello,
Here is the information you requested:
There are currently over 1,000 Federal Programs, 24,000 State Programs, 30,000 Private
Foundations and 20,000 Scholarship Programs available.
This year over $25 Billion Dollars In Free Grant Money will be given away by these
Private Foundations and Government Grant Agencies.
None of these programs require a credit check, collateral, security deposits, or
co-signers, you can apply even if you have a bankruptcy or bad credit, it doesn't
matter, you as a U.S. citizen are entitled to this money.
To learn more please visit our website at: http://boomslam.com/grant3.htm
Regards'
P.K. Marketing
If you are no longer interested in this offer please email:
[EMAIL PROTECTED]
---------------------------------------------------------------------------
sean
--
Sean Harding [EMAIL PROTECTED] | "She's gone. She gave me a pen.
http://www.dogcow.org/sean/ | I gave her my heart, she gave me a pen."
| --Lloyd Dobler, 'Say Anything'
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
