Hello, You could write a Meta rule that contained two sub rules - one for matching "The Bat!" mailer, and the other matching the "chat.ru" link at the bottom. Fire a score if both rules hit. It may not be optimal, but it got rid of that Spam for me, and I haven't had a FP yet.
If you check out the meta that was posted on here not long ago to do with the "Spaces Live" Spam, that has a very similar concept, involving The Bat mailer and Spaces Live links at the bottom of the Spam. Cheers, Mike -----Original Message----- From: Francis Russell [mailto:francis+saus...@unchartedbackwaters.co.uk] Sent: Thursday, 15 January 2009 1:35 p.m. To: users@spamassassin.apache.org Subject: Russian spam Anyone know of any good rule-sets to block this sort of spam? http://www.unchartedbackwaters.co.uk/files/russian_spam.txt I find that Pyzor and Razor completely miss it as well as the DNS blacklists (although I believe this one has a relay in one of the Spamhaus ones now). I'm aware of the language whitelisting feature but presumably there is a better way then just assuming everything in language x is spam? Francis
