Almost all the emails in this thread are being flagged, despite the fact that
I have the mailinglist whitelisted..
X-Spam-Status: Yes, hits=5.4 required=5.0
tests=BAD_CREDIT,BAYES_44,L_BizInfo,
SPAMCOP_URI_RBL,USER_IN_WHITELIST_TO,
WS_URI_RBL
autolearn=no version=2.63
-----Original Message-----
From: Fred [mailto:[EMAIL PROTECTED]
Sent: 28 June, 2004 8:28 PM
To: Chris Santerre; 'Nichols, William';
[EMAIL PROTECTED]
Subject: Re: Rule for email of "$43321" ?
The ---system information--- part is always present too, I've had a rule for
that one for about 2 weeks. Last week this phrase was appearing in the
Adipren720 spams.
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
810-794-4400
mailto:[EMAIL PROTECTED]
Chris Santerre wrote:
> This kind of stuff wil be in my upcoming dynamic bigevil ruleset. All
> of these spams change the dollar amount, but the dir of 'a1' remains
> constant thru them all.
>
> Mark on that.
>
> --Chris
>
> -----Original Message-----
> From: Nichols, William [mailto:[EMAIL PROTECTED]
> Sent: Monday, June 28, 2004 10:50 AM
> To: [EMAIL PROTECTED]
> Subject: Rule for email of "$43321" ?
>
>
>
> I am getting a ton of emails with the subject just being a five digit
> dollar amounr:
>
>
>
> $43221
>
>
>
> And the email is like:
>
>
>
> Hello,
>
> I sent you an email a few days ago, because you now qualify for a new
> mortgage.
>
> You could get $300,000 for as little as $700 a month!
>
> Bad credit is no problem, you can pull cash out or refinance.
>
>
>
> Please click on this link:
>
> http://finance-planet.info/a1/ke.php?bks=71
> <http://finance-planet.info/a1/ke.php?bks=71>
>
>
>
> Best Regards,
>
> Steve Morris
>
>
>
>
>
> ---- system information ----
>
> individual differing based do Provider's additional their by more
> Specifying [EMAIL PROTECTED] target relationship users
> Description processing:
>
> reflection submitted Many measurement send locale-affected holidays
> each
>
>
>
>
>
> I am wondering if someone had a rule for the subject or something. I
> am surprised as this email has been around a while and none of the
> rules_du_jour are matching it.
>
>
>
> Bill
