You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jo Rhett <jr...@netconsonance.com> on 2006/10/18 19:24:06 UTC

for the people who write rules

Sorry, I should write a rule but no time today or tomorrow.  This e-mail 
has gotten past SA with no score on 4 different accounts nearly half a 
dozen times today.  The only change in the e-mail is the name used in 
the From address, which is also reflected in the Subject line.  It's 
always TXHE.

-------- Original Message --------
Subject: Rosemary Steiner wrote:
Date: Wed, 18 Oct 2006 08:42:50 +0480
From: Rosemary Steiner <qq...@binarypulse.com>
To: <jr...@svcolo.com>

hi Rosemary i hope this is your email.
I was like to see you the other day. I hope you are truly had like the 
New York.
So much so much happening all the time, lots of great opportunities.
And speaking of opportunities, the deal I was speaking you about 
yesterday embraces a company
known as Tex-Homa (TXHE).
It's already rise, but the big info isn't even
out yet, so there's still time. I have got this shares already and made
2000. I recommend you to do the same today.

Hope this helps you out.  I'll see you this weekend.
Yours Rosemary Steiner

Re: for the people who write rules

Posted by "Peter H. Lemieux" <ph...@cyways.com>.
Jo Rhett wrote:
> Sorry, I should write a rule but no time today or tomorrow.  This e-mail 
> has gotten past SA with no score on 4 different accounts nearly half a 
> dozen times today.  The only change in the e-mail is the name used in 
> the From address, which is also reflected in the Subject line.  It's 
> always TXHE.

I'm using this for now:

SUBJ_SOMEONE_WROTE      Subject =~ /\bwrote:$/i

with a score of 3.  Works here.

I don't see many real messages with a subject line ending in "wrote:". 
The colon on the end gives it away!

Peter