On 2/7/2013 10:11 AM, Kevin A. McGrail wrote:
On 2/7/2013 11:15 AM, Marc Perkel wrote:
How would you write a rule to detect a message with less than 5 lines
and has a link in it?
Are you by chance working on crap from compromised Yahoo! accounts?
Have you looked at the 3.4 rule for __KAM_BODY_LENGTH_LT_128?
regards,
kAM
I haven't seen that rule. Yes - I'm working on the hacked yahoo crap.
--
Marc Perkel - Sales/Support
supp...@junkemailfilter.com
http://www.junkemailfilter.com
Junk Email Filter dot com
415-992-3400