new spam emails getting through..

[John Wilcock]

On Mon, 28 Jun 2004 09:11:26 -0400, Rob wrote:
> X-Message-Info: ZCU7gEvtw388ve02M529+suC464AUHpx

I find that the mere presence of the X-Message-Info header is a sure
spam sign. The rule below hit 499 spam and zero false positives over the
last four weeks here.

header   local_XMESSAGEINFO exists:X-Message-Info
describe local_XMESSAGEINFO X-Message-Info header found in message
score    local_XMESSAGEINFO 2.0


John.

-- 
-- Over 2400 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html