-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello John,

I find the following rules work well for me:

header   RM_sp_BannedCD  Subject =~ /b\s?a\s?n\s?n\s?e\s?d\s?c\s?d/i
describe RM_sp_BannedCD  Subject mentions the supposedly banned CD
score    RM_sp_BannedCD  1.21   # 21 spam, 0 ham, Aug 12 2003

body     RM_bp_BannedCD  /b\s?a\s?n\s?n\s?e\s?d\s?c\s?d/i
describe RM_bp_BannedCD  Body mentions the supposedly banned CD
score    RM_bp_BannedCD  1.21   # 231 spam, 0 ham, Aug 12 2003

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP0GGzZebK8E4qh1HEQKazwCeI8VFy5lB4ZCJk2R2+OJHM/Q75swAoOfi
dJ3dxl42rdxD65ogGnogk+Ib
=resJ
-----END PGP SIGNATURE-----


Monday, August 18, 2003, 12:44:24 PM, you wrote:

JM> Hi everyone,

JM> I don't know if you guys get the SPAM that advertises the "Banned CD"  I get 
dozens of them.  Anyway, I've added a body rule looking for the term "bannedc" or 
"banned c" and yet it still doesn't
JM> catch it eventhough the text is right there!  I know the rule is working because 
if I email myself something with this phrase, it gets blocked.  So, how do they put 
actual text in an email and it
JM> by SA?  The source for the email is below.  




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to