You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Francesco Potorti` <po...@potorti.it> on 2004/11/07 01:42:51 UTC
rules for ignorant spammers
header spammer_from From =~ /%FROM_USER@/
describe spammer_from Ignorant spammer: variables in From:
score spammer_from 5.0
header spammer_messageid Message-Id =~ /%MESSAGEID@|RND_LC_CHAR/
describe spammer_messageid Ignorant spammer: variables in Message-Id:
score spammer_messageid 5.0
header spammer_received Received =~ /%RECEIVED|%REC_WITH/
describe spammer_received Ignorant spammer: variables in Received:
score spammer_received 5.0
header spammer_reply_to Reply-to =~ /%FROM_USER@/
describe spammer_reply_to Ignorant spammer: variables in Reply-to:
score spammer_reply_to 5.0
header spammer_subject Subject =~ /%CUSTOM_SUBJECT/
describe spammer_subject Ignorant spammer: variables in Subject:
score spammer_subject 3.5
full spammer_charset /charset=%CHARSET/
describe spammer_charset Ignorant spammer: variables in charset=
score spammer_charset 1.5
body spammer_text /%MAKE_TXT\[[0-9]/
describe spammer_text Ignorant spammer: variables in text
score spammer_text 1.5
Re: rules for ignorant spammers
Posted by Raymond Dijkxhoorn <ra...@prolocation.net>.
Fransecso,
> header spammer_from From =~ /%FROM_USER@/
> describe spammer_from Ignorant spammer: variables in From:
> score spammer_from 5.0
>
> header spammer_messageid Message-Id =~ /%MESSAGEID@|RND_LC_CHAR/
> describe spammer_messageid Ignorant spammer: variables in Message-Id:
> score spammer_messageid 5.0
<cut>
There is SARE_RAND for that ...
X-Prolocation-MailScanner-SpamCheck: spam, SpamAssassin (score=8.901,
required 5, BAYES_00 -2.60, SARE_RAND_2W 1.50, SARE_RAND_3 2.00,
SARE_RAND_7 2.00, SARE_RAND_OTHER_AA 3.00, SARE_RAND_OTHER_U 3.00)
Your messge triggered 5 ot them... ;)
Bye,
Raymond.
Re: rules for ignorant spammers
Posted by Loren Wilton <lw...@earthlink.net>.
I believe we have something like 70_sare_random.cf at rulesemporium that has
a whole lot of these sort of things in it.
Whether it has these exact cases I can't say without running a comparison,
but I know we've accumulated a whole lot of the %-words in the last year.
Loren
----- Original Message -----
From: "Francesco Potorti`" <po...@potorti.it>
To: <us...@spamassassin.apache.org>
Sent: Saturday, November 06, 2004 4:42 PM
Subject: rules for ignorant spammers
> header spammer_from From =~ /%FROM_USER@/
> describe spammer_from Ignorant spammer: variables in From:
> score spammer_from 5.0
>
> header spammer_messageid Message-Id =~ /%MESSAGEID@|RND_LC_CHAR/
> describe spammer_messageid Ignorant spammer: variables in Message-Id:
> score spammer_messageid 5.0
>
> header spammer_received Received =~ /%RECEIVED|%REC_WITH/
> describe spammer_received Ignorant spammer: variables in Received:
> score spammer_received 5.0
>
> header spammer_reply_to Reply-to =~ /%FROM_USER@/
> describe spammer_reply_to Ignorant spammer: variables in Reply-to:
> score spammer_reply_to 5.0
>
> header spammer_subject Subject =~ /%CUSTOM_SUBJECT/
> describe spammer_subject Ignorant spammer: variables in Subject:
> score spammer_subject 3.5
>
> full spammer_charset /charset=%CHARSET/
> describe spammer_charset Ignorant spammer: variables in charset=
> score spammer_charset 1.5
>
> body spammer_text /%MAKE_TXT\[[0-9]/
> describe spammer_text Ignorant spammer: variables in text
> score spammer_text 1.5