The two spams below slipped by virtually unscathed under my 2.20 installation (I'm not using razor or DCC, so maybe those would have caught them).. I modified CLICK_HERE_LINK of 20_body_tests.cf to catch dashes and underscores between the words "click" and "here":
rawbody CLICK_HERE_LINK /click[-_\s]?here.{0,100}<\/a>/is Now that I think about it, it may be a good idea to use [-_\s]* to catch multiple dashes, underscores, or spaces. I'll leave that up to you guys. Also I'm getting a LOT of interest rate spam, so I added a new rule in my 99_local.cf.. I'm only recommending it cause it works for me, it could potentially cause false positives for anyone in the mortgage/banking industry. full LOW_INTEREST /lowest.{1,16}interest rate/ describe LOW_INTEREST Describes low interest rates score LOW_INTEREST 3 Shayne ---------- Forwarded message ---------- Date: Sun, 19 May 2002 20:17:26 -0400 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Get the lowest possible interest rate for you--GUARANTEED. Certain chances only come around every few decades or so. This is one. Why you ask? Because home loan rates are headed up. Have you locked in the lowest rate, in almost thirty years, for your present home loan? Rates haven't been this low in a long time. They may well never be this low again. This is your chance to secure a better future. You could literally save enough money to buy that new car you've been wanting or to take that special vacation. Why wouldn't you jump at this chance? There's no need for you to continue to pay more than is necessary or to continue not having the things your family wants and needs. We're a nationwide mortgage lender. We're N0T a broker. And we can guarantee you the best rate and the best deal possible for you. But only if you take action today. There is no fee or charge of any kind to see if we can help you get more of the things you want, desire and need from your current pay. You can easily determine if we can help you in just a few short minutes. We only provide information in terms so simple that anyone can understand them. You won't need to be a lawyer to see the savings, this we promise. We offer both first and second home loans and we will be happy to show you why your current loan is the best for you. 0r why you should replace it. And once again, there's no risk for you. None at all. Take a couple of minutes and use the link below that works for you. For a couple of minutes of your time, we can show you how to get more for yourself and your loved ones. Don't lose this chance. Please take action now. <a href="http://mamma.com/Search?evid=CE002333701a&eng=Lycos&cb=WebZone&dest=http://61.129.81.99/paul/bren/mortg/">Click_Here</a> http://mamma.com/Search?evid=CE002333701a&eng=Lycos&cb=WebZone&dest=http://61.129.81.99/paul/bren/mortg/ Sincerely, James W. Minick MortBanc, Inc. __________________________________________________________________ Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/ ---------- Forwarded message ---------- Date: Sun, 19 May 2002 20:54:27 -0400 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: You can gain from lowest interest rates in 30 years Certain chances only come around every few decades or so. This is one. Why you ask? Because home loan rates are headed up. Have you locked in the lowest rate, in almost thirty years, for your present home loan? Rates haven't been this low in a long time. They may well never be this low again. This is your chance to secure a better future. You could literally save enough money to buy that new car you've been wanting or to take that special vacation. Why wouldn't you jump at this chance? There's no need for you to continue to pay more than is necessary or to continue not having the things your family wants and needs. We're a nationwide mortgage lender. We're N0T a broker. And we can guarantee you the best rate and the best deal possible for you. But only if you take action today. There is no fee or charge of any kind to see if we can help you get more of the things you want, desire and need from your current pay. You can easily determine if we can help you in just a few short minutes. We only provide information in terms so simple that anyone can understand them. You won't need to be a lawyer to see the savings, this we promise. We offer both first and second home loans and we will be happy to show you why your current loan is the best for you. 0r why you should replace it. And once again, there's no risk for you. None at all. Take a couple of minutes and use the link below that works for you. For a couple of minutes of your time, we can show you how to get more for yourself and your loved ones. Don't lose this chance. Please take action now. <a href="http://cz6.clickzs.com/tx.php?sne&61.129.81.99/paul/bren/mortg/">Click_Here</a> http://cz6.clickzs.com/tx.php?sne&61.129.81.99/paul/bren/mortg/ Sincerely, James W. Minick MortBanc, Inc. __________________________________________________________________ Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/ _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk