On Wed, 2013-07-24 at 20:28 -0400, Ian Turner wrote:
> I notice that the old rule ADDRESS_IN_SUBJECT was dropped starting in
> SpamAssassin 3.3 (The change is in bug 5123 and commit 467038). Lately,
> however, I've started getting a lot of spam again where the To: address is in
> the subject. Perhaps it's time to evaluate restoring this rule?
Well, how do they score usually? It's hardly worth adding a point if
they are rather high scoring anyway.
header LOCALPART_IN_SUBJECT eval:check_for_to_in_subject('user')
And all of them do hit that rule. A super-set of the ADDRESS variant,
using the local part instead of the complete address. Still in stock
rules.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
