Re: Yahoo single link spam

[Benny Pedersen]

David F. Skoll skrev den 2013-02-22 21:27:

Header            Matches RegExp       ^To:(.*?@.*?){5}   AND
Envelope Sender   Ends with            @yahoo.com         AND
MessageSize       <                    6000
Well, ok... the MessageSize condition is tricky.  And this rule does
kick up some false-positives, but overall it works pretty well for 
us.

David could you make this as a clamav logical signature ?, and test it 
?

if not i could try self :)