I've been getting these also. The subject is always a $ followed by a string of five numbers. It sounds like that's the best way to address these.
RO ----- Original Message ----- From: "William Stearns" <[EMAIL PROTECTED]> To: "Evan Platt" <[EMAIL PROTECTED]> Cc: "ML-spamassassin-talk" <[EMAIL PROTECTED]>; "William Stearns" <[EMAIL PROTECTED]> Sent: Sunday, June 27, 2004 11:46 AM Subject: Re: Anyone have rules for this? Good afternoon, Evan, On Sun, 27 Jun 2004, Evan Platt wrote: > Searched the archive didn't see anything.. And no, I can't really upgrade > SA, it's integrated into my mail software (Merak) > > Subject: $12882 > Date: Sun, 27 Jun 2004 20:13:55 +0300 > MIME-Version: 1.0 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: 8bit > X-Spam-Status: No, hits=1.90 required=5.00 > tests=SUBJ_DOLLARS,BAD_CREDIT,BAYES_20,NO_RDNS2 version=2.61 > X-Spam-Level: * > X-Spam-Checker-Version: SpamAssassin 2.61 (1.2.2) on espphotography.com > > Hello, > I sent you an email a few days ago, because you now qualify for a new mortgage. > You could get $300,000 for as little as $700 a month! > Bad credit is no problem, you can pull cash out or refinance. > > Please click on this link: > http://finance-planet.info/a1/ke.php?bks=71 The sa-blacklist contains this domain, so would have added 1-3 points to that spam. http://www.stearns.org/sa-blacklist and http://www.surbl.org . Are you training SA with Bayes? That would have added up to 5 points as well. Cheers, - Bill --------------------------------------------------------------------------- "All programs evolve until they can send email." -- Richard Letts "Except Microsoft Exchange." -- Art (found on the Snort web site) -------------------------------------------------------------------------- William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, freedups, p0f, rsync-backup, ssh-keyinstall, dns-check, more at: http://www.stearns.org --------------------------------------------------------------------------
