Payal Rathod wrote: > Hi, > To my various email addresses I am getting lot of "Re: news" spam. > SA is not catching all of it. I have pasted a links of headers and body > at, http://pastebin.ca/46477 > Can someone advise on it please? > With warm regards, > -Payal
Bayes has been catching these here, but in some cases the only other rule to fire has been HTML_MESSAGE. I've managed to largely mitigate this with a custom meta rule that combines BAYES_99 and a custom subject rule: header __LOCAL_NEWS_IN_SUBJ Subject =~ /re:.*news/i meta LOCAL_BAYES99_NEWS_SPAM (__LOCAL_NEWS_IN_SUBJ && BAYES_99) score LOCAL_BAYES99_NEWS_SPAM 2.0 You perhaps could expand it to other BAYES_x rules, depending on how brave you are feeling...YMMV. :-) Iain
