there's a rule that matches them in 3.1.x sa-update, fwiw.
--j.
Loren Wilton writes:
> I haven't seen any of these. But if the spams universally have "<single
> word> wrote: <stuff>" as the subject then I'd consider a more stringent rule:
>
> /^\w+\s+wrote:/i
>
> or
> /^(?:\w+\s+){1,2}wrote:/i
>
> or
> /^(?:re:\s*|fw:\s*){0,20}(?:\w+\s+){1,2}wrote:/i
>
> Loren
>
> ----- Original Message -----
> From: Juan Mas
> To: MIKE YRABEDRA
> Cc: spamassassin-users
> Sent: Friday, November 03, 2006 7:15 AM
> Subject: Re: Block "wrote:" spams
>
>
> Ive been getting the same and just wrote a rule for it today. Ive got what
> you have listed below. Havent tested it though.
>
>
> On 11/3/06, MIKE YRABEDRA < [EMAIL PROTECTED]> wrote:
>
>
> I am getting a lot of these "Bob wrote: " spams
>
> Anyone know a way to write the rule so if the subject has "wrote:" in the
> subject, tag it?
>
> Here is what I have?
>
> header WROTE_SUB Subject =~ /\bwrote\:\b/i
> describe WROTE_SUB Wrote in Subject
> score WROTE_SUB 3.0
>
>
>
>
> --
> Mike Yrabedra B^)>
>
>
>
>
>
>
>
> --
> -Juan
