It absolutely WILL hit on ham.  I gave Message-id =+ /qmail\@/ a score of 2.0 
which seems to help axe the German propaganda without generating FP's.

So far today we have seen 19 emails hit the qmail@ rule, of which only two 
triggered the other German spam rules.

Pierre Thomson
BIC



-----Original Message-----
From: Kevin Peuhkurinen [mailto:[EMAIL PROTECTED]
Sent: Friday, June 11, 2004 9:18 AM
To: David Hooton
Cc: 'Nick Leverton'; [EMAIL PROTECTED]
Subject: Re: Flooded by spam in German


You're absolutely sure that this will never hit on ham?

David Hooton wrote:

>>-----Original Message-----
>>From: Nick Leverton [mailto:[EMAIL PROTECTED]
>>Sent: Friday, 11 June 2004 11:10 PM
>>To: [EMAIL PROTECTED]
>>Subject: Re: Flooded by spam in German
>>
>>I've got the following additional subject lines since yesterday:
>>
>>DEUTSCHES MAEDCHEN FAST VERGEWALTIGT
>>Geschrieben von Margrit am 07.  April 2004
>>So sieht die Wahrheit aus!
>>Bin ich zu weltfremd? Ich glaube wohl kaum
>>ASYLANT QUAELTE TIERE BRUTAL ZU TODE
>>
>>I'm sure the list will keep on growing.  Anybody else got some new ones
>>to do swapsies with ? :-)
>>    
>>
>
>Guys,
>
>Very simple ruleset, no subjects etc needed:
>
>header GERMANSPAM  MESSAGEID =~ /^<[EMAIL PROTECTED]>/
>describe       GERMANSPAM Contains German Spam
>score          GERMANSPAM 100
>
>We've been killing them all day long
>
>Cheers!
>
>Dave
>
>
>========================================================================
> Pain free spam & virus protection by:          www.mailsecurity.net.au
> Forward undetected SPAM to:                   [EMAIL PROTECTED]
>========================================================================
>
>
>  
>

Reply via email to