Sometimes simple is good, I've found when the message is from x-mailer=thebat or squirrelmail for example it is probably spam.
On Fri, Dec 30, 2005 at 04:30:39PM -0500, Matt Kettler wrote: > Really, this isn't a very good question for the SpamAssassin sorts. We're > usually more interested in more complicated signs of spam. > > That said, you might want to look at the top-10 list that AOL published > recently. > > http://www.informationweek.com/news/showArticle.jhtml?articleID=175701011