I have had a fair number of VERY similar Spam emails that are all about comparing prices. I have put a number in a pastebin below. They all seem to be originating from Fasthosts in UK which I cannot really blacklist in entirety.
Can anyone suggest how to block it with a Spamassassin rule? http://pastebin.com/B9YqTsvZ I had tried to create something from a meta rule, but that has not worked so far: body __CGK_CLOUDAPP_1 /cloudapp/i body __CGK_CLOUDAPP_2 /\bCompare\b/i meta CGK_CLOUDAPP (( __CGK_CLOUDAPP_1 + __CGK_CLOUDAPP_2) > 1) score CGK_CLOUDAPP 10 Very grateful for any advice Kind Regards, Christoph
