Gary Funck wrote:

A pattern like the following:
/([a-z][;][a-z]+.*){5}/i
might get some traction. This has to be run after the HTML is stripped.


That exact message got through here, too. Actually, it was using the whitelist_from trick to get a whopping -93.6 points, but OTOH, bayes_60 and lots of other filters would have given it 6.4 points if it weren't for the white list.

These are the SA headers from one of these mails:

X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on webby
X-Spam-Status: No, hits=-93.6 required=5.0 tests=ADVERT_CODE2,BAYES_60,
FROM_ENDS_IN_NUMS,HTML_FONTCOLOR_RED,HTML_FONT_BIG,
HTML_FONT_INVISIBLE,HTML_MESSAGE,MIME_HTML_ONLY,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS,USER_IN_WHITELIST autolearn=no version=2.60


BTW: What kind of header is this?

X-Ki: <Y2hyaXMwNDAyQGRlLXB1bmt0LmRl>

--ck



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to