One personal flag for me that seems to be a good spam indicator is all-caps
From and Subject header content. For example:

Subject: NOTIFICATION  OF  BEQUEST
From: BROWN  WALTER  ASSOCIATES <[EMAIL PROTECTED]>

This scored on SUBJ_ALL_CAPS but I'm wondering if anyone's gotten good results from a rule that would implement FROM_ALL_CAPS?

Reply via email to