The following one got through.  I changed CALL_888 to:

 body CALL_888 
/(?:call|dial).{1,15}8(?:88|77|66|55|44|33|22|11)[\-\s][\dA-Z]+[\-\s]?[\dA-Z]+/i

(I suppose I could add '00' and lose the CALL_1_800 test, but 1-800 is
scored higher than 888.)
and it triggers now.  The message still only scores 4.8, though.  There
are a few things the sender has done to confuse us.  See "If you wish to
withdrawn  from the   l i s t" near the bottom!  Should "child support" be
in spamphrases?  I get quite a few of these, but most of them trigger for
other reasons.  Could we collapse spaced-out single letters before
testing?  I'm no regex expert, so I don't know what the cpu cost of these
changes would be.

-- Spam follows ---------------------
>From [EMAIL PROTECTED] Mon Feb  4 09:32:37 2002
Return-Path: <[EMAIL PROTECTED]>
Received: from localhost (scott@localhost [127.0.0.1])
        by office.waldetech.sk.ca (8.11.4/8.11.4) with ESMTP id g14BqAQ26705
        for <scott@localhost>; Mon, 4 Feb 2002 05:52:11 -0600
Received: from www.saskatoon.com [139.142.200.25]
        by localhost with POP3 (fetchmail-5.8.6)
        for scott@localhost (single-drop); Mon, 04 Feb 2002 05:52:11 -0600 (CST)
Received: from server50.plusserver.de ([217.172.160.110])
        by www.saskatoon.com (8.12.1/8.12.1/Debian -5) with ESMTP id
    g14Bj3GH003895;
        Mon, 4 Feb 2002 05:45:13 -0600
Received: from [202.164.166.14] (helo=csc.dk)
        by server50.plusserver.de with smtp (Exim 3.20 #1)
        id 16XhUc-0000Xw-00; Mon, 04 Feb 2002 12:41:02 +0100
Message-ID: <0000513933d3$00003457$[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
Subject: F   W   :           C   h   i   l   d          S   u   p   p   o
    r   t          P   r   o   c   e   s   s   i   n   g
Date: Mon, 04 Feb 2002 03:46:41 -0800
X-Priority: 3
X-MSMail-Priority: Normal
X-Virus-Scanned: by amavisd-milter (http://amavis.org/)
X-Spam-Status: No, hits=3.8 required=8.0 tests=NO_REAL_NAME,SUBJ_HAS_SPACES,
    FREQ_SPAM_PHRASE version=2.01

We collect Child Support AND OUR SERVICES COST YOU NOTHING!!!                     ^s^24

Do you or someone you know need help collecting your child support payments?

We have strong interest in uncollected Child Support in your
City and Area.

We are the largest firm in the world specializing in the
Collection of Child Support.

Currently we are processing millions of dollars worth of Child Support in
the United States alone. We have associate offices in virtually every city
in the US and in most foreign countries.

Let us help you collect what your children are due!

Contact us now for more information.
You have absolutely nothing to lose!!!


Please call 1 877 306 6599 8am to 5pm CST Mon-Sat.
Consultants are waiting for your call...








++++++++++++++++++++++++++++++++++++++++++++++++++++++++
If you wish to  withdrawn  from the   l i s t,
email [EMAIL PROTECTED]
++++++++++++++++++++++++++++++++++++++++++++++++++++++++









We are the largest firm in the world specializing in the
Collection of Child Support.
-- End of Spam ---------------------

ttyl
srw

-- 
Walde Technology                Networks, Internet, Intranets
Saskatoon, SK  CANADA           Linux Support, Web Programming
306-221-7393                    Network Security, Firewalls


_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to