Frank,

Frank Tore Johansen said:
>
> Has anyone already made a rule for these? (See attachments for
> two spam-samples)

Try these generated rules from the CMOScript CGI:
http://sandgnat.com/cmos/cmos.jsp?words=phentermin+viagra+valium+paxil+buspar+adipex+ionamin+meridia+xenical+ambien+sonata+flexeril+celebrex+fioricet+tramadol+levitra+propecia+acyclovir+prozac+ultram+ativan+soma

I haven't tested this particular set for false positives, so it might be
prudent to do so yourself.

>
> Excerp from one (btw, how can you safely whitelist emails on this
> mailing list?  Has such rules ever been abused?)

use whitelist_from_rcvd instead of whitelist_from, methinks (I personally
skip checking posts to this list using procmail based on List-ID header)


--
Chris Thielen

Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.com/cmos/

Reply via email to