They mostly only hit bayes (running 3.1.7).
ImageInfo.pm is very helpful here
0.0 HTML_MESSAGE BODY: HTML included in message
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.8 SARE_GIF_ATTACH FULL: Email has a inline gif
3.0 DC_GIF_UNO_LARGO Message contains a single large inline gif
Most also hit John Rudd's jr_rfc1912.cf too.
http://people.ucsc.edu/~jrudd/spamassassin/
Patrick Sneyers
Op 8-nov-06, om 13:02 heeft Hall J D ((ISeLS)) het volgende geschreven:
Hi,
I've just run sa-update on my 3.1.4 box and it's not picked up
anything
new. In fact it looking at the dates on the files it looks like there
haven't been any updates to these rules since the first time I ran
sa-update back in August.
Is sa-update only supporting the newer releases of 3.1.x?
Thanks,
Jonathan
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: 03 November 2006 17:44
To: Loren Wilton
Cc: users@spamassassin.apache.org
Subject: Re: Block "wrote:" spams
there's a rule that matches them in 3.1.x sa-update, fwiw.
--j.
Loren Wilton writes:
I haven't seen any of these. But if the spams universally have
"<single word> wrote: <stuff>" as the subject then I'd consider a more
stringent rule:
/^\w+\s+wrote:/i
or
/^(?:\w+\s+){1,2}wrote:/i
or
/^(?:re:\s*|fw:\s*){0,20}(?:\w+\s+){1,2}wrote:/i
Loren
----- Original Message -----
From: Juan Mas
To: MIKE YRABEDRA
Cc: spamassassin-users
Sent: Friday, November 03, 2006 7:15 AM
Subject: Re: Block "wrote:" spams
Ive been getting the same and just wrote a rule for it today. Ive
got what you have listed below. Havent tested it though.
On 11/3/06, MIKE YRABEDRA < [EMAIL PROTECTED]> wrote:
I am getting a lot of these "Bob wrote: " spams
Anyone know a way to write the rule so if the subject has
"wrote:"
in the
subject, tag it?
Here is what I have?
header WROTE_SUB Subject =~ /\bwrote\:\b/i
describe WROTE_SUB Wrote in Subject
score WROTE_SUB 3.0
--
Mike Yrabedra B^)>
--
-Juan
