[Mimedefang] SA rule?

[Damrose, Mark]

> -----Original Message-----
> From: Ashley M. Kirchner [mailto:ashley at pcraft.com]
> 
>     How can I set up a rule to block the following subject:
> 
>     Subject: We give you $200 bonus at Casino Zeal!
> 
>     ...though really it should just check for the '$200 bonus' and 
> 'Casino' part since those are what's been constant this whole 
> time.  The 
> name changes all the time.

I have this in /etc/mail/spamassassin/local.cf.  
I believe it can go in any .cf file in /etc/mail/spamassassin
My spam threshold is 8, adjust according to your own.
I prefix all my custom rules with ECC, adjust according to 
your own convention for custom rules.

header __ECC_200_BONUS1 subject =~ /\$200\sbonus/i
header __ECC_200_BONUS2 subject =~ /casino/i
meta ECC_200_BONUS __ECC_200_BONUS1 && __ECC_200_BONUS2
score ECC_200_BONUS 8
describe ECC_200_BONUS persistant casino spam