rule against this?

[Gareth]

The chickenpox rules work well against those emails.
So do the new rules which come as standard in spamassassin 3.2.


> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info]On Behalf Of Jan
> Agermose
> Sent: 14 August 2007 19:01
> To: MailScanner discussion
> Subject: rule against this?
> 
> 
> Hi
> 
> We are getting really really many emails that look like this the last 48
> hours or so:
> 
> T+h+i-s Tu_esday i-t-s CYTV!!*! 
> G+e.t on C*Y_T,V Firs t T+hing on TU-ES_DAY, i t'''s goi+ng to e_xpload!
> 
> Compan *y: C_HINA YOUT*V C'O'R.P ( O,T'C BB:CYTV..O'B) 
> Symb'ol:  C,Y+T*V
> Curr-ent Price.: $_0+.,4-6 
> Mond ay M_ove: (+U.p Over(12'.2*0%) 
> T*h,e pric'e is at a minim*um it w.i l'l b-o*o_m on Tues'day! 
> Re'com,mendation: "S'TRONG-B+UY" star+tin.g on T+uesday*, AUGU+ST 1+4,,
> 2 0_0*6'. 
> 
> The above is only a part of the mail and it seams non of the mails are
> so much alike that they are marked as spam by the bayes system. I've
> tried to feed a few 100 of them but for every one of them SA Learn says
> "learned tokens from 1 message" (so I guess its not seen before?) and
> also it does not seam to have any effect on the ability to block new
> mails. 
> 
> Anyway - I was thinking that maybe someone had written a rule to block
> mails like this? 
> 
> Best regards
> Jan
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
> 
> 
>