At 01:00 AM 3/2/04 -0800, Jingmin (Jimmy) Zhou wrote: >Hi, sorry I did not attach the complete message in the previous >message - thought it's not so useful except the body. ;-) Hope >this time it's better.
Not to hawk my own rules, but this is the kind of garbage antidrug.cf was designed to pick up.
Well, pretty much anything from HINET is spam, at least around here. So that is one possible check. There really isn't much else, other than another URL to add to the bigevil list if it isn't already there.
Probably could write a couple of rules for spaced-out and misspelled common drug names. In fact the antidrug file may already have these.
Loren
----- Original Message ----- From: "Jingmin (Jimmy) Zhou" <jimmy@mtc.dhs.org> To: <spamassassin-users@incubator.apache.org> Sent: Tuesday, March 02, 2004 1:00 AM Subject: rule to detect this spam
> Hi, sorry I did not attach the complete message in the previous > message - thought it's not so useful except the body. ;-) Hope > this time it's better.
I shall add to bigevil. I have ~3000+ domains, and yet I can tell which ones aren't included. That is sad. I'm not sure if its a gift or a sickness.
We get legit mail from HINET daily :( Wish I didn't.
--Chris
> -----Original Message----- > From: Loren Wilton [mailto:lwilton@earthlink.net] > Sent: Tuesday, March 02, 2004 9:22 AM > To: spamassassin-users@incubator.apache.org > Subject: Re: rule to detect this spam > > > Well, pretty much anything from HINET is spam, at least > around here. So > that is one possible check. There really isn't much else, other than > another URL to add to the bigevil list if it isn't already there. > > Probably could write a couple of rules for spaced-out and > misspelled common > drug names. In fact the antidrug file may already have these. > > Loren > > ----- Original Message ----- > From: "Jingmin (Jimmy) Zhou" <jimmy@mtc.dhs.org> > To: <spamassassin-users@incubator.apache.org> > Sent: Tuesday, March 02, 2004 1:00 AM > Subject: rule to detect this spam > > > > Hi, sorry I did not attach the complete message in the previous > > message - thought it's not so useful except the body. ;-) Hope > > this time it's better. >