Glenn Sieb wrote:
> http://www.wingfoot.org/~ges/spam.txt
>
> Can't use pastebin or other tools--it gets flagged as spam. :)
It's a bit mangled there, but I put it back together and got this on my
system:
X-Spam-Status: Yes, score=7.6 required=5.0 tests=FORGED_HOTMAIL_RCVD2,
FREEMAIL_FROM,FREEMAIL_REPLYTO,MISSING_MIME_HB_SEP,SPF_PASS,URI_HEX
autolearn=no version=3.2.5
X-Spam-Report:
* 0.5 FREEMAIL_FROM From-address is freemail domain
* -0.0 SPF_PASS SPF: sender matches SPF record
* 1.1 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no
* 'Received:'
* 2.0 FREEMAIL_REPLYTO Different freemail address found in
* Reply-To or Body than From
* 1.3 URI_HEX URI: URI hostname has long hexadecimal sequence
* 2.7 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME
* header and body
I'm not sure if that last rule is legitimate or if it was caused by the
mangling when you posted the sample.
If these messages are all very similar, you could create a rule or two
based on the phrases in the body. Something like this:
...untested...
body BB_HI_HONEY /Hi there honey!\s+Would you like to chat/
describe BB_HI_HONEY Spammy chat phrase
score BB_HI_HONEY 2
body __BB_YAHOO_ID /My Yahoo I\.D\. is/
body __BB_MSN_NAME /My msn screenname is/
meta BB_CONTACT_IDS __BB_YAHOO_ID && __BB_MSN_NAME
describe BB_CONTACT_IDS Sharing both Yahoo and MSN IDs
score BB_CONTACT_IDS 2
Adjust the scores based on your preferences.
--
Bowie
