I seem to remember we discussed a way to figure out how much HTML comment is in a message, but I am not able to find a decent ruleset that is trying to count the amount of comment.
Let me elaborate with an example: http://pastebin.com/AS6kvLH2 I do realize the spamvertized site (way way down the message) is at the moment in blacklists. But it was not at the time the message was received. And I reckon a fresh domain will be spammed in the next batch. But they typically all have _pages_ of comment, and behind that scattering of words, a small block with the payload. What would be the best way to score such an unusual amout of HTML comment in a message? -- View this message in context: http://old.nabble.com/Lots-of-comment-in-mail%2C-how-to-score-tp33272106p33272106.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
