You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2006/05/26 16:43:38 UTC

Re: Penalizing mail with multiple Subject or From header fields?

mark --

it's not too pretty.

header TWO_SUBJS        ALL =~ /(?:^|\n)Subject:.*\nSubject:/s

--j.

Mark Martinec writes:
> Is it possible to add some score points to mail which has multiple
> Subject header fields and/or multiple From header fields?
> 
> I guess not, but it is worth asking nevertheless. I have some
> fine spam specimens with two Subject lines (with different texts)
> and two From lines (again with different texts). It is amazing
> how weirdly some mail readers react to such mail (like toggling
> contents of a line in a mail list when stepping to such mail).
> I don't know if it was intentional or not, but it appears
> to have a potential for tricking users or filters.
> 
> (according to RFC2822 there should be exactly one From field
> (with possibly multiple addresses of mail authors),
> and zero or one Subject field)
> 
> 
>   Mark