I added a rule detecting "Blat.v3" inside the MESSAGEID header. Gave "only" 2 FPs from the last matching 204 Mails at our side - 202 were spam.
Ove -----Ursprüngliche Nachricht----- Von: Michael Monnerie [mailto:lists.michael.monne...@is.it-management.at] Gesendet: Montag, 20. Januar 2014 09:54 An: users@spamassassin.apache.org Betreff: Re: tons of forged bills in german Am 18.01.2014 15:27, schrieb Axb: > > pastebin samples ? > Here are two, from Deutsche Telekom and Vodafone: http://pastebin.com/M3aTrdDx http://pastebin.com/i0kfjG8s
