one thing I noticed is that for messages that are enc-64 , it seems that other tests are NOT run on the decoded message. I'd suggest decodeding and then running all the regular tests OR if there is no plain or html message and its only enc-64, chances are 99% that its spam and should get a high score.
second, it would be nice if there were a really easy way to blacklist URI found inline. There are some these days that are so simple they don't trigger many tests, but they do have links to known spammers like:
body T_OPRAH /Oprah.*wrinkle.*sexual/si score T_OPRAH 4.0
uri T_BLACKLIST_URI /( SIL12345.com| look4abride.com| lolslideshow.com| zland.com )/ix score T_BLACKLIST_URI 5.0
Am I on the right track with this?
thanx,
Dan
------------------------------------------------------- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk