Re: The 'believe-it' spams Jonathan Nichols wrote:
> What was the rule you added? :)

I just did the brute force thing and looked for an entire phrase from
that message.  It really isn't worthy and this will change very
quickly such that any rule I post now won't be interesting to have in
a ruleset in a couple of days.  It needs to expire.

  body TV_ARM_SPAM_1		/^Well we have developed the TV arm for every website in the world/
  describe TV_ARM_SPAM_1	TV Arm Spam
  score TV_ARM_SPAM_1		5.5

It is just a brute force rule that works today on that particular wave
of incoming spam.

Bob


