Yo! I'm very surprised SpamAssassin doesn't do better on this (attached) style of messages. As you can see in the headers, score is very low with 4.6, of which 3.5 are because I run bogofilter together with sa (other scores are only adjusted a few tenths).
I receive these buggers quite often and IIRC the 'Message from friend' subject is always almost the same, as are the catch phrases 'check it out' and 'I just visited ...'. I think there wouldn't be many false positives if I go for these 3? Any chance of rules for this making it into the next sa version? cheers -- vbi -- this email is protected by a digital signature: http://fortytwo.ch/gpg NOTE: keyserver bugs! get my key here: https://fortytwo.ch/gpg/92082481
--- Begin Message ---I just visited Alchemestry and thought that you might want to check it out as well. You can visit the website by clicking http://www.ric1.com/c.e?23046221E00D6691 Here's a description of what the website is all about: Check it out!. If you visit the site and use its Recommend- It(R) feature to tell your friends you will be entered to win $10,000. * Get free newsletters on the topics that interest you! * Click http://www.ric1.com/go.e?113003&s=878225 to sign up ------------------------------------------- Powered by the FREE Recommend-It(r) Service http://www.recommend-it.com/go.e?291107 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]--- End Message ---
signature.asc
Description: This is a digitally signed message part