On Thu, 29 Nov 2007, Jason Holbrook wrote:

> Everything I have read indicates to me that I should stay away from
> custom rules.

Goodness. Where are you reading that? The customizability of SA is 
its great attraction when compared to a black-box proprietary spam 
filter.

> ****** My spam info used to be here******
> 
> Had to remove it to post message

Copy the full message, including all headers, as a text file onto a
web server you control and post the URL here.

> I am wondering should I create a custom rule that would affect
> these types of messages.

Before considering rolling your own rules, try leveraging the 
experience and skills of others. Poke around 
http://www.rulesemporium.com/ and http://www.rulesemporium.com/
and see if some of the rulesets there would address your problem.

Also, make sure you have URIBL checking enabled. Checking domain names 
in the message body is a very effective method.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
                                           -- Peter da Silva in a.s.r
-----------------------------------------------------------------------
 26 days until Christmas

Reply via email to