Scot, Yep, seen quite a few %RND_UC_CHAR, also have seen <rndline> in the subject from different broken spamware.
I have added the following to my subject filter to push them over the edge. SUBJECT 20 CONTAINS %RND_ SUBJECT 20 CONTAINS <rndline> Fritz Frederick P. Squib, Jr. Network Operations/Mail Administrator Citizens Telephone Company of Kecksburg http://www.wpa.net () ascii ribbon campaign - against html mail /\ - against microsoft attachments -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scot Desort Sent: Monday, November 10, 2003 9:26 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] some spam slipping through... We've had quite a bit of spam getting through lately, all with a similarly formatted subject line: --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
