Jonathan Nichols wrote:
> What was the rule you added? :)

I just did the brute force thing and looked for an entire phrase from
that message.  It really isn't worthy and this will change very
quickly such that any rule I post now won't be interesting to have in
a ruleset in a couple of days.  It needs to expire.

  body TV_ARM_SPAM_1            /^Well we have developed the TV arm for every 
website in the world/
  describe TV_ARM_SPAM_1        TV Arm Spam
  score TV_ARM_SPAM_1           5.5

It is just a brute force rule that works today on that particular wave
of incoming spam.

Bob

Reply via email to