Spamassassin Greeting Card Question

[UxBoD]

http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf

It has successfully blocked all eCards so far.  Though I am sure they will alter it soon!
----- Original Message -----
From: "Andrews Carl 455" <Carl.Andrews at crackerbarrel.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: 26 July 2007 17:08:51 o'clock (GMT) Europe/London
Subject: RE: Spamassassin Greeting Card Question

Yeah, my first attempt at a spamassassin rule - I did not do as well as
the spammers :-<
KAM.cf - I am going to go find that one. I am using rules_du_jour but do
not see that one.

Thanks!

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steve
Campbell
Sent: Thursday, July 26, 2007 10:47 AM
To: MailScanner discussion
Subject: Re: Spamassassin Greeting Card Question




Andrews Carl 455 wrote:
> Anyone have a spamassassin rule for the "You've received a 
> greeting/ecard ..." spams? I have this but it is not working:
>
> Thanks for any help,
> Carl
>
> GreetingCard.cf:
>
> header CBGREET99 Subject =~ /You've received a greeting card from a 
> school-mate/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting ecard from a 
> class mate!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting ecard from a 
> neighbour!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting postcard from 
> a partner!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting postcard from 
> a worshipper!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a postcard from a family 
> member!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a postcard from a 
> neighbour!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a postcard from a 
> worshipper!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received an ecard from a 
> colleague!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting ecard from a 
> Worshipper!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a postcard from a 
> Worshipper!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>
> header CBGREET99 Subject =~ /You've received a greeting ecard from a 
> School friend!/i
> score CBGREET99	99
> describe CBGREET99 Greeting Card Spam and Virus.
>   
You didn't really name all of the rules the same thing did you? I use a 
few rules like the ones you have listed but make them less specific. For

instance "received a greeting ecard", "received a greeting card" , and 
also use the KAM.cf ruleset. It's about eliminated the stuff.

What you have will only work on whatever the last one is set to, I 
believe, as you are redefining the rule over and over.

Steve Campbell

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.