Got a spam that's so easy, the spammers write the rules for us: Message-ID: <[EMAIL PROTECTED]>
So, header MESSAGEID_RATWARE ALL =~ /\nMessage-ID:.<[^-]{7,13}-[^-]{3,11}-[^-]{2,6}/i describe MESSAGEID_RATWARE Message-ID has ratware pattern score MESSAGEID_RATWARE 0.5 I've scored it low due to possible false-positives. And for kicks, the same "unformed" message-id as given triggers its own rule. :) ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk