spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Checking FROM FIELD for Keywords

Re: Checking FROM FIELD for Keywords

From: John Hardin <jhardin_at_nospam>
Date: Thu Oct 14 2010 - 23:19:16 GMT
To: users@spamassassin.apache.org

On Thu, 14 Oct 2010, John Hardin wrote:

> On Thu, 14 Oct 2010, wvpTV wrote:
>
>> We've seen a recent explosion in spam that SpamAssassin does not flag,
>> it seems mainly because the FROM (sender) field is being used for
>> subject content, eg: VIAGRA, PORN etc etc
>>
>> Can anyone tell me how far off a standard filter update might be to
>> carry out checks on the FROM field?
>
> There is a FROM_IN_TO_AND_SUBJ rule in my sandbox that is performing
> well in masschecks.

Argh. I totally misinterpreted what you're asking. Sorry for the noise!

-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Our government wants to do everything it can "for the children," except sparing them crushing tax burdens. ----------------------------------------------------------------------- 64 days until TRON Legacy