Hum, I hadn't bothered making rules for those specifically because they are
getting caught by other local rules. But those wouldn't be applicable in
your case, so something like the following UNTESTED rules would probably
work. Um, versino 2.61. Did that have metas? I don't recall. If it did,
the first set will work for you. If not, use the second set.
header __LW_SUB_DOLLARS Subject =~ /^\$\d{1,7}\s*$/
body __LW_HELLO_MORT /\nHello,\s*\nI sent you an email a few days ago,
because you now qualify for a new mortgage\.\s*\n/
meta LW_MORT_SPAM (__LW_SUB_DOLLARS && __LW_HELLO_MORT)
describe LW_MORT_SPAM You won a new mortgage!
score LW_MORT_SPAM 4.8
Non-meta:
header LW_SUB_DOLLARS Subject =~ /^\$\d{1,7}\s*$/
body LW_HELLO_MORT /\nHello,\s*\nI sent you an email a few days ago,
because you now qualify for a new mortgage\.\s*\n/
score LW_SUB_DOLLARS 1
score LW_HELLO_MORT 4
Loren
----- Original Message -----
From: "Evan Platt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, June 27, 2004 10:25 AM
Subject: Anyone have rules for this?
> Searched the archive didn't see anything.. And no, I can't really upgrade
> SA, it's integrated into my mail software (Merak)
>
> Subject: $12882
> Date: Sun, 27 Jun 2004 20:13:55 +0300
> MIME-Version: 1.0
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: 8bit
> X-Spam-Status: No, hits=1.90 required=5.00
> tests=SUBJ_DOLLARS,BAD_CREDIT,BAYES_20,NO_RDNS2 version=2.61
> X-Spam-Level: *
> X-Spam-Checker-Version: SpamAssassin 2.61 (1.2.2) on espphotography.com
>
> Hello,
> I sent you an email a few days ago, because you now qualify for a new
mortgage.
> You could get $300,000 for as little as $700 a month!
> Bad credit is no problem, you can pull cash out or refinance.
>
> Please click on this link:
> http://finance-planet.info/a1/ke.php?bks=71
>
> Best Regards,
> Steve Morris
>
>
> ---- system information ----
> maintaining variation creating environment location formatting allow
parties
>
> identifier operation procedure running Internationalization which patterns
> function
> Use Task distinctions version yet model remote latest
>
