RE: [SAtalk] Ruleset for RND UC CHAR spam

[Kenneth Porter]

Another pattern I notice is that the plain text part always has 3 lines of 
random words, all lower case, no punctuation except apostrophe in the 
contractions. Some have a blank line (one space) before the 3 lines of 
text. Maybe we could add a low-valued body rule for that pattern?

The HTML part always has an image,usually at one of these hosts:

<http://www.2004hosting.org/>
<http://www.2004hosting.net/>
<http://www.530000x.net/>
<http://www.530000x.com/>
The HTML part also has backhair, but usually not enough to trigger 
rejection.

-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk