Spam Messages

[Randal, Phil]

body     HC_GIRL        /\bnice girl that would like to chat.{1,16}Email
me at .{1,32}\.info.{1,120}\bpic(ture)?s\b/
describe HC_GIRL        Girl with pics scam
score    HC_GIRL        5

body     HC_GIRL2       /I am writing from my friend's email/
describe HC_GIRL2       Girl with pics scam
score    HC_GIRL2       5

Mind the linewraps in the above.

Cheers,

Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Rob Poe
> Sent: 19 February 2008 18:48
> To: MailScanner discussion
> Subject: Spam Messages
> 
> I'm getting a lot of these recently ..  ( I put in the 
> Address Removed to avoid tripping filters)..
> 
> Anyone have any rules for this?
> 
> --------------------------------------------------------------
> --------------------------
> 
> SpamAssassin (not cached, score=4.952, required 5, BAYES_60 1.00,
> 	DCC_CHECK 2.17, RCVD_IN_PBL 0.91, RCVD_IN_SORBS_DUL 0.88)
> 
> Hello! I am tired tonight. I am nice girl that would like to 
> chat with you. 
> Email me at <<address_removed>> only, because I am using my friend's 
> email to write this. I will show you some of my private pictures
> 
> 
> 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
>