Found a bunch of these in my mailbox this morning, too. This rule seems to catch them all so far (until the spammer changes his wording)....
body WORK_FROM_HOME_BA /(?:Learn|Find out) how to (?:make|generate) 1.5 - 3.5k (?:daily|(?:per|a) day) from (?:your )?(?:home|house)/i score WORK_FROM_HOME_BA 4 Sandy ----- Original Message ----- From: "Scott Friedman" <[EMAIL PROTECTED]> To: <users@spamassassin.apache.org> Sent: Sunday, October 15, 2006 10:29 AM Subject: Been getting alot of these lately.. anyone else? > Has anyone figured a good recipe for blocking these type of spam yet? > > I get 3-5 per day to each user on my mail server. > > Thanks > > > > -------- Original Message -------- > Subject: Re: Work has been closed permanently > Date: Sun, 15 Oct 2006 21:28:50 +0600 > From: Leslie Hilton <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > > > > Attention , > > Find out how to generate 1.5 - 3.5k per day from your home. > > 800.671.9007 > > Phone me at my number if you can return calls. > > Thanks Alot, > Leslie Hilton > > > > > >
