Hi Chris, On 11/29/06, Chris <[EMAIL PROTECTED]> wrote:
On Tuesday 28 November 2006 6:00 pm, Simon wrote: > I was getting these spam emails with the subject "Name wrote:", so > someone suggested i update SA and run sa-update. Which i have and its > now solved that issue - nice. > > But now im getting subject "hi it's Name", does someone have a custom > ruleset for this spam please? Im trying to write one myself with no > luck: > > header HI_ITS_NAME Subject =~ /\bhi\sit's\s+[a-z]/i > describe HI_ITS_NAME Hi It's Name in Subject > score HI_ITS_NAME 6.5Content analysis details: (37.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.8 RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:' spam)
Sorry - this is working sweet for me as well... is the "hi it's Name" emails im having issues with... :) Simon
