Hello Geoff, Tuesday, July 20, 2004, 7:44:06 AM, you wrote:
>> Hello, all. >> >> I have received lots of blank mails which to, subject and body. >> Is that a spam too? >> If then why they send such a blank spam mail? >> >> Additionaly, is there any rule against blank subject? >> GS> I'm still looking for a rule which will get these messages with no body, GS> To: and Subject: fields. header SARE_MSGID_EMPTY MESSAGEID =~ /^\s*$/ describe SARE_MSGID_EMPTY Message ID is empty, or just spaces - probable spamsign score SARE_MSGID_EMPTY 1.106 #ham SARE_MSGID_EMPTY all but one ham in year 2000; most recent: 12/2002 #counts SARE_MSGID_EMPTY 1835s/13h of 85084 corpus (62489s/22595h RM) 06/08/04 #counts SARE_MSGID_EMPTY 145s/6h of 32586 corpus (9341s/23245h JH) 06/10/04 header SARE_TO_EMPTY To =~ /<>/ describe SARE_TO_EMPTY To address is set to empty score SARE_TO_EMPTY 0.278 #hist SARE_TO_EMPTY Originally submitted by Bob Menschel #counts SARE_TO_EMPTY 3s/0h of 89541 corpus (67467s/22074h RM) 05/28/04 #counts SARE_TO_EMPTY 2s/0h of 32586 corpus (9341s/23245h JH) 06/10/04 meta SARE_HTML_NO_BODY ( !__SARE_HTML_HAS_MSG ) describe SARE_HTML_NO_BODY Message is empty score SARE_HTML_NO_BODY 0.834 #counts SARE_HTML_NO_BODY 728s/2h of 85079 corpus (62484s/22595h RM) 06/07/04 #max SARE_HTML_NO_BODY 942s/2h of 89684 corpus (67687s/21997h RM) 05/23/04 #counts SARE_HTML_NO_BODY 1s/0h of 32534 corpus (9287s/23247h JH) 05/19/04 #counts SARE_HTML_NO_BODY 0s/8h of 6944 corpus (3188s/3756h CT) 05/19/04 meta SARE_HTML_NO_BODY_TO ( !__SARE_HTML_HAS_MSG && !__SARE_HTML_HAS_TO ) describe SARE_HTML_NO_BODY_TO Message is empty and has no To destination score SARE_HTML_NO_BODY_TO 1.569 #counts SARE_HTML_NO_BODY_TO 724s/0h of 85079 corpus (62484s/22595h RM) 06/07/04 #max SARE_HTML_NO_BODY_TO 942s/0h of 89684 corpus (67687s/21997h RM) 05/23/04 #counts SARE_HTML_NO_BODY_TO 0s/2h of 6944 corpus (3188s/3756h CT) 05/19/04 #AddsTo SARE_HTML_NO_BODY_TO SARE_HTML_NO_BODY in the 70_sare_html1.cf file meta SARE_HTML_EMPTY __SARE_HTML_CT_TXTHTM && !( __SARE_HTML_HAS_TITLE || __SARE_HTML_HAS_HTML || __SARE_HTML_HAS_FONT || __SARE_HTML_HAS_BODY || __SARE_HTML_HAS_PRE || __SARE_HTML_HAS_DIV || __SARE_HTML_HAS_P || __SARE_HTML_HAS_A || __SARE_HTML_HAS_BR ) describe SARE_HTML_EMPTY Email is HTML format, but common tags not found score SARE_HTML_EMPTY 0.703 #counts SARE_HTML_EMPTY 31s/1h of 85079 corpus (62484s/22595h RM) 06/07/04 #counts SARE_HTML_EMPTY 22s/0h of 32534 corpus (9287s/23247h JH) 05/19/04 #counts SARE_HTML_EMPTY 1s/0h of 6944 corpus (3188s/3756h CT) 05/19/04 #ham SARE_HTML_EMPTY An "html" format email, 30 Oct 2002, Microsoft Outlook Express 6.00.2600.0000, that used no tags, just one long textual paragraph
