I've come up with lots of custom rules as of late, and I'd like to see if they should be merged into spamassassin ruleset. Below are some of the more effective ones I've found. Please give me comments as to whether you find them to be accurate/useful.
Thanks, Jerry http://www.syslog.org header SUBJECT_TAG_A Subject =~ /\s{4,}\S+ {1,}[a-z0-9]{4,}$/i describe SUBJECT_TAG_A Subject line contains a spam tag A score SUBJECT_TAG_A 3 header SUBJECT_TAG_B Subject =~ / [a-z0-9]{10,}$/i describe SUBJECT_TAG_B Subject line contains a spam tag B score SUBJECT_TAG_B 3 rawbody SPAM_TAG_C /-=[a-zA-Z0-9]{10,}=-/ describe SPAM_TAG_C Message contains a known spam tag C score SPAM_TAG_C 4 rawbody SPAM_TAG_D / -[0-9a-z.]{10,}- /i describe SPAM_TAG_D Message contains a known spam tag D score SPAM_TAG_D 3 rawbody SPAM_TAG_E /[a-z0-9]{25,}/i describe SPAM_TAG_E Message contains a known spam tag E score SPAM_TAG_E 1 uri URI_SPAM_URL /\.[a-z][a-z][0-9][0-9]\.[com|net]/i describe URI_SPAM_URL Contains a link to a commonly formed spam domain name score URI_SPAM_URL 2 uri URI_SPAM_URL_B /\.[a-z][0-9][a-z][0-9]\.[com|net]/i describe URI_SPAM_URL_B Contains a link to a commonly formed spam domain name score URI_SPAM_URL_B 2 rawbody HIDE_WHITE_TEXT /font color=["|']?\#FFFFFF/i describe HIDE_WHITE_TEXT Message contains white text, probably to hide a spam tag score HIDE_WHITE_TEXT 1 ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk