One spam hit an autoresponder on our website hard today. Unfortunately,
unlike most spams, it *did* have a valid reply address which itself pointed
to an auto responder of its own. Chaos quickly ensued...
But that's not what this note is about. The subject of the offending
message was "You Won $30 Dollars !". It was classified as spam (the
autoresponder isn't yet guarded by SA.) In reviewing the mail SA caught
today I came across this subject: "NEW! Tiny Wireless Camera, UNDER $80
BUCKS!". (SA didn't classify this one as spam. It was flagged by other
means.) Both of these subjects give a price with both a dollar sign and a
word denoting dollars. This prompted me to write this rule:
header DOUBLE_BUCKS Subject =~ /(?i)\$[0-9]+([.][0-9]+)? (bucks|dollars)/
describe DOUBLE_BUCKS Subject: contains dollar sign before price and "dollars"
after
Perhaps this would be worth adding to the ruleset.
--
Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/)
"Excellant Written and Communications Skills required" - seen on chi.jobs
_______________________________________________________________
Hundreds of nodes, one monster rendering program.
Now that's a super model! Visit http://clustering.foundries.sf.net/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
