The existing version of this rule (2.55) is checking for 'X-Mailer: The
Bat!' and a Message-ID failing to match a given format. The version of
the tests in 2.60cvs is a little more complex but still dependant upon
finding 'X-Mailer: The Bat!'.

Recently I have seen spam (porn, single image) pretending to be from The
Bat, with 'User-Agent: The Bat!' instead of 'X-Mailer: The Bat!'

for 2.55 I've added the following to my local.cf

header __THEBAT_UA User-Agent =~ /The Bat!/

meta FORGED_MUA_THEBAT ((__THEBAT_UA || __THEBAT_MUA) &&
!__THEBAT_MSGID)

This seems to work, hope it helps someone and doesn't break anything :)

-- 
Yorkshire Dave


-- 
Scanned by MailScanner at wot.no-ip.com



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to