I just got three spams with a particular characteristic that's very easy to write a rule for, so I did. Maybe this is already covered in one of the add-on rulesets - I don't use but one or two of them, so it's entirely possible.
The spams come with subjects like "(27)Claim your gift(515)", with the numbers being random and different lengths. One of the spams I just received can be found at: http://sthomas.net/spam1.txt (with my addresses sanitized of course) Here's the rule - score as appropriate. I hope others can find it useful.. header LOC_DBL_NUM_SUB Subject =~ /^\([0-9]+\).*?\([0-9]+\)$/ describe LOC_DBL_NUM_SUB Subject contains two numbers in parens score LOC_DBL_NUM_SUB .01 -- "Copy from one, it's plagiarism; copy from two, it's research." - Wilson Mizner (1876-1933)
