The existing version of this rule (2.55) is checking for 'X-Mailer: The Bat!' and a Message-ID failing to match a given format. The version of the tests in 2.60cvs is a little more complex but still dependant upon finding 'X-Mailer: The Bat!'.
Recently I have seen spam (porn, single image) pretending to be from The Bat, with 'User-Agent: The Bat!' instead of 'X-Mailer: The Bat!' for 2.55 I've added the following to my local.cf header __THEBAT_UA User-Agent =~ /The Bat!/ meta FORGED_MUA_THEBAT ((__THEBAT_UA || __THEBAT_MUA) && !__THEBAT_MSGID) This seems to work, hope it helps someone and doesn't break anything :) -- Yorkshire Dave -- Scanned by MailScanner at wot.no-ip.com ------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk