Following up on the offers (should now test for offer[sz]) in the headers these also seem to be seen frequently in the headers as usernames or embedded in domain names.
waaay back Malte said: > | | Subject: Re: [SAtalk] "offers" in header a good rule for trapping > | | spam > | | > | | AFAIK did we have such a rule in 70_cvs_rules_under_test.cf and > | | the > | | GA sorted it out (there's too much valid commerical mail send from > | | offers@*). Actually, we didn't -- we had other similar ones, but I don't think "offers" (note the plural!) was in there. It looks like it's actually a good test (on my corpus at least), so I've put it in the CVS set for testing... --j. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
