After many suggestions from this group, I have come up with the following rule. It works great!!! header SR_SUB_STOCKS Subject =~ /0[tT[cC]|[pP]erf0rmance|[fF]r0[mM]|[wW]a\|\||[aA]\|ert|[gG]r0wth|[pP]\|ay|[yY]0[uU]|[sS]tOck|[sS]t0ck|[iI]nvest0r|[iI]nvestOr|[pP]OwerhOuse|[pP]0ssib\|e|[sS]ma\|l|[sS]ma\|\||[sS]mal\||[nN]0thing|[nN]Othing|[rR]epOrt|[mM]icr0Cap|[pP]u\|se|rO0f|TheMicr0CapJ0urna\||[wW]il\||[cC]Ompany|[mM]Ove|[pP]0tentia\||Rising Stars Equity Newsletter|[mM]Omentum|You are a Winner/ describe SR_SUB_STOCKS Spammer subject - stock deals score SR_SUB_STOCKS 0 This was my first shot at writing a production rule, so ANY suggestions on making it better would be welcome.
Thanks, Steve ________________________________ From: Matt Thoene [mailto:[EMAIL PROTECTED] Sent: Thu 2/3/2005 10:42 AM To: users@spamassassin.apache.org Subject: ***SPAM*** Odd subject line spam Hello, We're seeing quite a few spam emails with subject lines similar to the below... "Better st0ck perfOrmance fr0m 0tc helpline" Does anyone have a rule for these yet? -- Regards, Matt
