Hello Rich, Saturday, January 10, 2004, 10:27:47 PM, you wrote:
RW> I came up with a set of rules which appear to catch the new strain RW> of spam with a meaningless jumble of words in the body, while hope- RW> fully not catching any legitimate mail. See below; comments welcome, RW> and (naturally) everyone is free to use these rules if you want to. The single rule I use for these is: header RM_hxm_mPOPwebMail X-Mailer =~ /mPOP Web-Mail/ describe RM_hxm_mPOPwebMail Uses mPOP Web-Mail Mailer often used by spammers score RM_hxm_mPOPwebMail 9.000 # 855s/0h of 87289 corpus (70035s/17254h) I don't find any indication anywhere on the Web that mPOP is used for anything but spam. If anyone can provide evidence that it can be used for ham on a valid webmail site, I'll lower the score. Bob Menschel ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk