Spamassassin Greeting Card Question

[Alex Broens]

On 7/26/2007 6:00 PM, Matt Kettler wrote:
> Andrews Carl 455 wrote:
>> Anyone have a spamassassin rule for the "You've received a
>> greeting/ecard ..." spams? I have this but it is not working:
>>
>> Thanks for any help,
>> Carl
>>
>> GreetingCard.cf:
> 
> As Julian pointed out, all your rules have the same name, so only the last one
> exists. All the others will be over-written by each other.
> 
> That said, I'm currently using this one rule, which covers pretty much
> everything I've seen.
> 
> (note: beware of line-wraps, there's only 3 lines here)
> 
> header L_S_SUBJPOSTCARD Subject =~/\bYou've received a (?:greeting)?
> (?:e|post)?card from a .{4,20}!/
> describe L_S_SUBJPOSTCARD 	greeting card virus
> score L_S_SUBJPOSTCARD	1.5

or reduce it to?

body	ECARD_BLAH	/^SEEING YOUR CARD$/

Alex