Hello Scott, Saturday, June 19, 2004, 7:46:56 AM, you wrote:
SB> Alright, I've had it with these folks. I've been getting MANY of these SB> for the last week and nothing is catching them. ... SB> Return-Path: <[EMAIL PROTECTED]> SB> Received: from 216.114.128.66 ([222.108.11.77]) ... SB> X-Message-Info: J02eNSl74rxw64VZ36+ucgJG440TZe SB> Content-Type: multipart/alternative; SB> boundary="--4961150885349268" In addition to what I've seen other recommend, SARE_HEAD_SPAM in 70_sare_header1.cf would trigger on the X-Message-Info header, with a default score of 2.222 (hitting over 5300 spam among SARE corpora, and only 2 ham). SARE_BOUNDARY_07 in 70_sare_header0.cf would trigger on the Content-Type boundary, also for 2.222 (hitting over 8000 spam and 0 ham). Bob Menschel
