On Thu, Sep 11, 2003 at 04:36:02PM -0400, Steven W. Orr wrote:
> that I can just add?

Here you are:

header __SOBIG_HEADER           X-MailScanner =~ /^Found to be clean/
body __SOBIG_BODY               /(?:Please s|S)ee the attached file for details/
header __SOBIG_SUB_1            Subject =~ /^Re: That movie/
header __SOBIG_SUB_2            Subject =~ /^Re: Wicked screensaver/
header __SOBIG_SUB_3            Subject =~ /^Re: Your application/
header __SOBIG_SUB_4            Subject =~ /^Re: Approved/
header __SOBIG_SUB_5            Subject =~ /^Re: Re: My details/
header __SOBIG_SUB_6            Subject =~ /^Re: Details/
header __SOBIG_SUB_7            Subject =~ /^Your details/
header __SOBIG_SUB_8            Subject =~ /^Thank you!/
header __SOBIG_SUB_9            Subject =~ /^Re: Thank you!/
meta SOBIG                      __SOBIG_HEADER && __SOBIG_BODY && (__SOBIG_SUB_1 || 
__SOBIG_SUB_2 || __SOBIG_SUB_3 || __SOBIG_SUB_4 || __SOBIG_SUB_5 || __SOBIG_SUB_6 || 
__SOBIG_SUB_7 || __SOBIG_SUB_8 || __SOBIG_SUB_9)
describe SOBIG                  Sobig-F virus pattern
score SOBIG                     6

Adjust the score to your liking.

Regards,

Michael


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to