Hi,

Does anyone see anything wrong with this rule I just put together. It is a meta rule that is intended to attempt to detect HTML-only spam with forged freemail Reply-To: header

meta LW_HTML_REPLYTO_FORGED (FREEMAIL_FORGED_REPLYTO && HTML_MESSAGE && MIME_HTML_ONLY) describe LW_HTML_REPLYTO_FORGED HTML-only message with forged freemail reply-to
score  LW_HTML_REPLYTO_FORGED 2.0
tflags LW_HTML_REPLYTO_FORGED noautolearn

I've set it to noautolearn while testing.

Regards,
Lawrence
  • new rule Lawrence @ Rogers

Reply via email to