On Thu, Jan 01, 2004 at 09:33:23PM -0500, Mark London wrote:
>Hi - I see the rule USERNAME_IN_SUBJECT, but I've never seen thattriggered at my site, and a test message sent to myself did not trigger it. We are using spamassassin with sendmail, mimedefang, cyrus, and redhat linux. Any idea why it's not working? Thanks. - MarkSure, there are two reasons:
From: Mark London <[EMAIL PROTECTED]> Subject: london, you look cute.
1) the username is "mrl", which isn't in the subject
Actually, no. The rule is matching the username to the To: address, not From:. The purpose of spammers doing this is to think it's a personal message, so it has to be the username of the person receiving the spam.
2) the subject would have to be "mrl," followed by a non-whitespace char.
This is the correct reason, though! "london,you look cute." triggers the rule! What is the reason behind this? I've had tons of spam with the username at the start of the subject, and most start off with the username followed by a common and then a space. And I just noticed in my Trash a spam message which contained the email address at the start of the subject line, and that didn't trigger either.
Seems to me that this rule is not very useful, which is probably why the original poster never noticed it triggering either, for all their spam with usernames in the subject line. It may not create any false positives, but need is helpful in indentifying any spam. Maybe in the distant past it was useful, but obviously spamming software has been configured to avoid the rule.
Mark
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
