Mailing List Archive: Missing Core Rule?

Missing Core Rule?

Mar 5, 2004, 1:32 AM

Post #1 of 3 (374 views)

I have received a spam that scored 9.9 on my system. The subject of the
email was:
"You could WIN A PLASMA TV"
The content was mostly a large GIF image and some HTML.
When I examine the rules that were triggered, I was surprised that none was
triggered for the fact that the header told me I was a winner or potential
winner...
In previous occasions I've seen a similar rule triggered when such text was
found in the body of a message.
Indeed it was also in the body of the message but as part of the GIF
image...

Shouldn't this simple header rule be part of the core rules that are
distributed with SA?

--ilan

RE: Missing Core Rule? [ In reply to ]

csanterre at MerchantsOverseas

Mar 5, 2004, 8:25 AM

Post #2 of 3 (368 views)

Permalink

Can we have a copy of the spam?

> -----Original Message-----
> From: Ilan Aisic [mailto:ilan@pointer.co.il]
> Sent: Friday, March 05, 2004 3:32 AM
> To: spamassassin-users@incubator.apache.org
> Subject: Missing Core Rule?
>
>
> I have received a spam that scored 9.9 on my system. The
> subject of the
> email was:
> "You could WIN A PLASMA TV"
> The content was mostly a large GIF image and some HTML.
> When I examine the rules that were triggered, I was surprised
> that none was
> triggered for the fact that the header told me I was a winner
> or potential
> winner...
> In previous occasions I've seen a similar rule triggered when
> such text was
> found in the body of a message.
> Indeed it was also in the body of the message but as part of the GIF
> image...
>
> Shouldn't this simple header rule be part of the core rules that are
> distributed with SA?
>
> --ilan
>

RE: Missing Core Rule? [ In reply to ]

ilan at pointer

Mar 5, 2004, 10:01 AM

Post #3 of 3 (366 views)

Permalink

Spam sent to Chris.
No reason to send it to the whole list.

--ilan

> -----Original Message-----
> From: Chris Santerre [mailto:csanterre@MerchantsOverseas.com]
> Sent: Friday, March 05, 2004 5:25 PM
> To: 'Ilan Aisic'; spamassassin-users@incubator.apache.org
> Subject: RE: Missing Core Rule?
>
>
> Can we have a copy of the spam?
>
> > -----Original Message-----
> > From: Ilan Aisic [mailto:ilan@pointer.co.il]
> > Sent: Friday, March 05, 2004 3:32 AM
> > To: spamassassin-users@incubator.apache.org
> > Subject: Missing Core Rule?
> >
> >
> > I have received a spam that scored 9.9 on my system. The
> > subject of the
> > email was:
> > "You could WIN A PLASMA TV"
> > The content was mostly a large GIF image and some HTML.
> > When I examine the rules that were triggered, I was surprised
> > that none was
> > triggered for the fact that the header told me I was a winner
> > or potential
> > winner...
> > In previous occasions I've seen a similar rule triggered when
> > such text was
> > found in the body of a message.
> > Indeed it was also in the body of the message but as part of the GIF
> > image...
> >
> > Shouldn't this simple header rule be part of the core rules
> that are
> > distributed with SA?
> >
> > --ilan
> >
>