new rule

["Lawrence @ Rogers" <la...@nl.rogers.com>]

Hi,

Does anyone see anything wrong with this rule I just put together. It is 
a meta rule that is intended to attempt to detect HTML-only spam with 
forged freemail Reply-To: header

meta LW_HTML_REPLYTO_FORGED (FREEMAIL_FORGED_REPLYTO && HTML_MESSAGE && 
MIME_HTML_ONLY)
describe LW_HTML_REPLYTO_FORGED HTML-only message with forged freemail 
reply-to
score  LW_HTML_REPLYTO_FORGED 2.0
tflags LW_HTML_REPLYTO_FORGED noautolearn

I've set it to noautolearn while testing.

Regards,
Lawrence

Re: new rule

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

On 02.11.10 18:27, Lawrence @ Rogers wrote:
> Does anyone see anything wrong with this rule I just put together. It is  
> a meta rule that is intended to attempt to detect HTML-only spam with  
> forged freemail Reply-To: header

> meta LW_HTML_REPLYTO_FORGED (FREEMAIL_FORGED_REPLYTO && HTML_MESSAGE &&  
> MIME_HTML_ONLY)
> describe LW_HTML_REPLYTO_FORGED HTML-only message with forged freemail  
> reply-to
> score  LW_HTML_REPLYTO_FORGED 2.0
> tflags LW_HTML_REPLYTO_FORGED noautolearn

I'm not sure if the HTML_MESSAGE is needed with MIME_HTML_ONLY.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I'm not interested in your website anymore.
If you need cookies, bake them yourself.