This one works like magic .. Also on the new variant which seems to have been
released this weekend.
body L_DRUGS11 /([CVAXP] ){5}/
header L_DRUGS12 MESSAGEID =~
/^<[EMAIL PROTECTED]>/
meta L_DRUGS1 L_DRUGS11 && L_DRUGS12
score L_DRUGS1 5
describe L_DRUGS1 Strange Message-ID and Spam signature in body.
- Ríkharður
-----Original Message-----
From: Jean-Paul Natola [mailto:[EMAIL PROTECTED]
Sent: 11 November, 2005 7:59 PM
To: users@spamassassin.apache.org
Subject: Rule for this ??
Here's an intelligent html coder
I viewed the source of the code because I was curious as to how these words
flew right through my SA ,
You will note that if turned into plain text , he used a bunch of tables and
cells to produce the following;
From: Firoz Granger [mailto:[EMAIL PROTECTED]
Sent: Friday, November 11, 2005 4:49 AM
To: Jean-Paul Natola
Subject: Glen: interesting information
Hi,
Qui ing f ications - vis aExpres op
t overpayor your Meddit our Pharms Sh
P V C X V Ar I I a A mo A A n L bz G L a I ia R I x U ec A S
M n
69,95 99,95
85,45
What rule, if any , can combat this?
