> Below is the content of a spam I just received.
> It has a very small font (font size = 1), that includes a bunch of words
> probably meant to confuse filters.
>
> I quickly searched, and couldn't find any spamassassin rule (running 2.63
> debian package here) matching tiny fonts.
> Just thinking it might score a point or two..
I use
#catch one case of tiny fonts
rawbody TINY_FONT_1 /\<.*font\-size\:[ \"]*1[^0-9]+.*\>/i
describe TINY_FONT_1 Body contains 1pt font
score TINY_FONT_1 10
rawbody TINY_FONT_0 /\<.*font\-size\:[ \"]*0[^0-9]+.*\>/i
describe TINY_FONT_0 Body contains 0pt font
score TINY_FONT_0 10
Loren
