On Thu, 7 Aug 2014 17:14:55 +0100
emailitis.com wrote:

> I have had a fair number of VERY similar Spam emails that are all
> about comparing prices.  I have put a number in a pastebin below.
> They all seem to be originating from Fasthosts in UK which I cannot
> really blacklist in entirety.
> 
>  
> 
> Can anyone suggest how to block it with a Spamassassin rule?
> 
>  
> 
> http://pastebin.com/B9YqTsvZ
> 
>  
> 
> I had tried to create something from a meta rule, but that has not
> worked so far:
> 
>  
> 
> body __CGK_CLOUDAPP_1 /cloudapp/i


cloudapp never appears in the body, it's in List-Unsubscribe and the
Message-ID


> body __CGK_CLOUDAPP_2 /\bCompare\b/i
> 
> meta CGK_CLOUDAPP (( __CGK_CLOUDAPP_1 +  __CGK_CLOUDAPP_2) > 1)
> 
> score CGK_CLOUDAPP 10

seems a bit thin for 10 points 

Reply via email to