Here's a slight refinement to the WORK_AT_HOME rule, designed to catch a spam
that slipped through today with the variation "working at home". I also changed
it to be case-insensitive.
body WORK_AT_HOME /(?:(?:WORK|MAKE (?:MONEY|\${1,})|WORKING)
(?:AT|FROM) HOME|HOME.?WORKER)/i
describe WORK_AT_HOME Information on how to work at home
Actually, since that one's getting awfully big, perhaps the following would be
a better way - this moves the "HOME.?WORKER" variation into the HOME_EMPLOYMENT
rule and lets WORK_AT_HOME handle "work at home", "working at home", "make
money from home", and so on:
body WORK_AT_HOME /(?:WORK|MAKE (?:MONEY|\${1,})|WORKING)
(?:AT|FROM) HOME/i
describe WORK_AT_HOME Information on how to work at home
body HOME_EMPLOYMENT /(?:HOME EMPLOYMENT|HOME.?WORKER/i
describe HOME_EMPLOYMENT Information on home employment
--
michael moncur mgm at starlingtech.com http://www.starlingtech.com/
"Misery no longer loves company. Nowadays it insists on it."
-- Russell Baker
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
