I hope that this is the right place to make public some rules that seems to catch extra spam.
Now my question is: I generate Netscape mail files (very, very like a Unix mail file) that contains spam that made it past SA. Should I do anything with it before tossing it out to sea? For instance, could it help anyone who updates SA rules, etc.? header FROM_BAR_multex From =~ /\@multexinvestornetwork\.com/i score FROM_BAR_multex 100 header FROM_BAR_giftcert From =~ /GiftCertificatescom\@/i score FROM_BAR_giftcert 100 header FROM_BAR_kong From =~ /bargainbazaar\@kongmail\.com/i score FROM_BAR_kong 100 header FROM_BAR_moneytips From =~ /\@news\.moneytips-gazette\.com/i score FROM_BAR_moneytips 100 header FROM_BAR_hotdeals From =~ /\@.*hotdailydeal\.com>/i score FROM_BAR_hotdeals 100 header FROM_BAR_superbargains From =~ /\@super-bargains\.com>/i score FROM_BAR_superbargains 100 header FROM_BAR_free_dvd From =~ /free\s*dvd/i score FROM_BAR_free_dvd 100 header SBJ_BAR_4_dvd Subject =~ /\b4\s*dvds?\b/i score SBJ_BAR_4_dvd 2.8 body BODY_BAR_matchcom /This\s+communication\s+is\s+not\s+from\s+Match\.com\.\s+If\s+you\s+wish\s+to\s+unsubscribe,\s+please\s+follow\s+the\s+instructions\s+below\./o score BODY_BAR_matchcom 2.8 header FROM_BAR_elucky From =~ /eLuckyDay\@/i score FROM_BAR_elucky 2.8 header FROM_BAR_fedmarket From =~ /\@fedmarket.com/i score FROM_BAR_fedmarket 2.8 header FROM_BAR_frisbee From =~ /frisbee\s*offers/i score FROM_BAR_frisbee 2.8 header FROM_BAR_ameridebt From =~ /\bameridebt\b/i score FROM_BAR_ameridebt 2.8 header FROM_BAR_dailydeals From =~ /\bDailyDeals/i score FROM_BAR_dailydeals 2.8 body BODY_BAR_rapevirgin /Do +you +want +to +rape +a +virgin +too/i score BODY_BAR_rapevirgin 1.5 body BODY_BAR_realrape /http:\/\/www\.realrape\.net/i score BODY_BAR_realrape 3.5 header FROM_BAR_aptimus From =~ /\baptimusvaluenetwork\b/i score FROM_BAR_aptimus 2.8 header FROM_BAR_emza From =~ /\@emza\.net\b/i score FROM_BAR_emza 2.8 header FROM_BAR_atlas From =~ /\batlasrewards@\@/i score FROM_BAR_atlas 2.8 ------------------------------------------------------- This sf.net email is sponsored by: Jabber - The world's fastest growing real-time communications platform! Don't just IM. Build it in! http://www.jabber.com/osdn/xim _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk