Nate, I'm sure there are some good SARE rules for this. Go to http://www.rulesemporium.com for some good custom made rules. I know there is antidrug.cf which contains many Pharm phrases.
Kris -----Original Message----- From: Nate [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 22, 2005 9:35 AM To: users@spamassassin.apache.org Subject: Spammed to death Hello, I'm using spamassassin 2.64 on Debian Woody. My clients emails are getting clobbered by "Pharma" spam. The messages seem to be using different encoding on words like Viagra, Cialis and sa is not picking them up. I've tried setting up header and body tests, but the bastards at "Pharma" keep changing the words spellings. Here is the typical email I get from these morons. Notice the missing letters "Vicodin", "Viagra", "Xanax", and "Cialis". In my email client Microsoft Outlook displays all the letters. However, if I copy and paste the message into a text editor the letters disappear. How do I kill these messages? I've tried sa-learn spam on several messages, but they still keep coming through with almost no spam points. Please help I am so sick of this! Thanks, Nate "From: Esaias Billings [mailto:[EMAIL PROTECTED] Sent: Monday, February 21, 2005 11:04 PM To: Xzavier Rivera Subject: Re: Best Mediccations Hello, Welcome to the best ONLINE ST0RE. Vi in $178(90p.) a a $209(100p.) ana al cod Vi gr X x $299(90p.) Ci is $324(90p.) With each purchase you get: >Home delivery. >Secure pay. >Total confidentiality >Reputable manufacturerrs. Have a nice day!"
