Jonathan Nichols wrote: > What was the rule you added? :) I just did the brute force thing and looked for an entire phrase from that message. It really isn't worthy and this will change very quickly such that any rule I post now won't be interesting to have in a ruleset in a couple of days. It needs to expire.
body TV_ARM_SPAM_1 /^Well we have developed the TV arm for every website in the world/ describe TV_ARM_SPAM_1 TV Arm Spam score TV_ARM_SPAM_1 5.5 It is just a brute force rule that works today on that particular wave of incoming spam. Bob