Ok, I just did another update. I took the spamtrap for the last 15 days and got this down to 944 rules. This should be much better and fresher. I also edited the reg2rule.pl script to include the trailing 'i' so case doesn't matter anymore. I also saved it in UNIX format!
The only things that you may want to change are the following domains, they are "OPT-IN" but we don't want them here: weatherbug.com winelibrary.com rent.com Everything else should be pure spam. OH! Are friend is at it again. So I wrote some quick rules just now that I'm about to implement. I just typed them and haven't tested for typos, but here they are. Have fun ;) rawbody MY_KIEV /kiev(school|online)/i describe MY_KIEV Hopeless spammer score MY_KIEV 4.0 header MY_KIEV_FROM From =~ /moshe|koldny/i describe MY_KIEV_FROM Hopless spammer sent this. score MY_KIEV_FROM 2.0 header MY_MESSAGEID_KIEV Message-ID =~ /[EMAIL PROTECTED]>/ describe MY_MESSAGEID_KIEV Hopless spammer message ID score MY_MESSAGEID_KIEV 1.0 Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wonka ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk