That would work to this_particular_spam, there should be a way to easily detect these spam messages as a hole. It is pure gibberish inserted in the body of an email that doesn't make any sense.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, December 24, 2003 10:45 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Comments test Omar, I get tons of this stuff too - but it is easy to filter on for example in your bodyfilter have lines like: BODY 2 CONTAINS Medicatio</ BODY 2 CONTAINS Overni</ & in your bodydomains filter: BODY 10 CONTAINS .p1x.jpg.com Just a suggestion - -Nick Hayer From: "Omar K." <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: [Declude.JunkMail] Comments test Date sent: Wed, 24 Dec 2003 21:21:17 +0200 Send reply to: [EMAIL PROTECTED] > Maybe im not quite familiar with the workings of the COMMENTS test, > but shouldn't the included text trigger that test? > > If not, what suggestions do you have? I see so much spam slip by that > has this charectristscs. > > Thanks, > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.