Re: Block "wrote:" spams

[Loren Wilton]

I haven't seen any of these.  But if the spams universally have "<single word> wrote: <stuff>" as the subject then I'd consider a more stringent rule:       /^\w+\s+wrote:/i   or     /^(?:\w+\s+){1,2}wrote:/i   or     /^(?:re:\s*|fw:\s*){0,20}(?:\w+\s+){1,2}wrote:/i           Loren   ----- Original Message ----- From: Juan Mas To: MIKE YRABEDRA Cc: spamassassin-users Sent: Friday, November 03, 2006 7:15 AM Subject: Re: Block "wrote:" spams Ive been getting the same and just wrote a rule for it today.  Ive got what you have listed below.  Havent tested it though. On 11/3/06, MIKE YRABEDRA < [EMAIL PROTECTED]> wrote: I am getting a lot of these "Bob wrote: " spams Anyone know a way to write the rule so if the subject has "wrote:" in the subject, tag it? Here is what I have? header WROTE_SUB      Subject =~ /\bwrote\:\b/i describe WROTE_SUB      Wrote in Subject score WROTE_SUB       3.0 -- Mike Yrabedra B^)> -- -Juan