On Fri, 22 Feb 2013 12:20:22 -0800
Marc Perkel <supp...@junkemailfilter.com> wrote:
> We need a rule to catch this. It looks like more data than it is but
> it's really little more than a single link. Like to see a rule that
> identifies it.
Our product lets you make compound rules. It should not be very hard
to translate this to SpamAssassin:
Header Matches RegExp ^To:(.*?@.*?){5} AND
Envelope Sender Ends with @yahoo.com AND
MessageSize < 6000
Well, ok... the MessageSize condition is tricky. And this rule does
kick up some false-positives, but overall it works pretty well for us.
Regards,
David.
