On Thu, 29 Nov 2007, Jason Holbrook wrote: > Everything I have read indicates to me that I should stay away from > custom rules.
Goodness. Where are you reading that? The customizability of SA is its great attraction when compared to a black-box proprietary spam filter. > ****** My spam info used to be here****** > > Had to remove it to post message Copy the full message, including all headers, as a text file onto a web server you control and post the URL here. > I am wondering should I create a custom rule that would affect > these types of messages. Before considering rolling your own rules, try leveraging the experience and skills of others. Poke around http://www.rulesemporium.com/ and http://www.rulesemporium.com/ and see if some of the rulesets there would address your problem. Also, make sure you have URIBL checking enabled. Checking domain names in the message body is a very effective method. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never does quite what I want. I wish Christopher Robin was here." -- Peter da Silva in a.s.r ----------------------------------------------------------------------- 26 days until Christmas