> > > http://www.wot.no-ip.com/cgi-bin/detoken.pl
> > >
> > > Most of the gibberish I see is encoded tracking information. I plugged
> > > in my domain name to the little script thingy, saved the .cf file, and
> > > it catches 'em like crazy.
> >
> > I've added a link for this to the front page
On Wed, Dec 17, 2003 at 10:05:41AM -0500, AltGrendel wrote:
> On Thu, 2003-12-11 at 11:17, Tom Meunier wrote:
> > http://www.wot.no-ip.com/cgi-bin/detoken.pl
> >
> > Most of the gibberish I see is encoded tracking information. I plugged
> > in my domain name to the little script thingy, saved the
On Thu, 2003-12-11 at 11:17, Tom Meunier wrote:
> http://www.wot.no-ip.com/cgi-bin/detoken.pl
>
> Most of the gibberish I see is encoded tracking information. I plugged
> in my domain name to the little script thingy, saved the .cf file, and
> it catches 'em like crazy.
>
I've added a link for
Archive of this:
http://marc.theaimsgroup.com/?t=10613675441&r=1&w=2
Analyze letter frequency for normal words, and detect non-normal letter
frequency of gibberish.
--luke
> I have noticed that many SPAM emails, end with seversl lines of gibberish,
> such as:
>
> lvwpdfobv qkviylqr qlm
]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Larry Starr
> Sent: Thursday, December 11, 2003 9:50 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Detecting strings of Gibberish
>
> I have noticed that many SPAM emails, end with seversl lines
> of gibberish, such as:
>
>
FYI: Solved.
> This is the only rule that failes for me:
>
> rawbody W_B64_HALL =~ /Z3VlbnRoZXJAcnVkZXJzcG9ydC5kZQ/
> describe W_B64_H Listwashing token found in head - Base64
> score W_B64_H 1.0
I just have been informed that this little bug has been fixed. The rule
should read:
hea
[ Cc: to the detoken rules maintainer ]
> However, seems there are issues with the full-address detoken rules and
> SA 2.61 (using Perl v5.8.0). Any ideas?
>
> # spamassassin --lint
> Failed to compile body SpamAssassin tests, skipping:
> (Bareword "ALL" not allowed while "strict subs" in
Bill Landry said:
> Hmmm, Jennifer was hosting her excellent rules at
> http://spamhammers.nxtek.net, but the site appears to be inaccessible
> right
> now. You can also fine them at
Jennifer moved her rulesets to:
http://www.emtinc.net/spamhammers.htm
--
Chris Thielen
Easily generate SpamAss
[ Cc: to the detoken rules maintainer ]
On Thu, 2003-12-11 at 17:17, Tom Meunier wrote:
> http://www.wot.no-ip.com/cgi-bin/detoken.pl
>
> Most of the gibberish I see is encoded tracking information. I plugged
> in my domain name to the little script thingy, saved the .cf file, and
> it catches '
set also.
Bill
- Original Message -
From: "Larry Starr" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, December 11, 2003 7:49 AM
Subject: [SAtalk] Detecting strings of Gibberish
> > I have noticed that many SPAM emails, end with seversl lin
[mailto:[EMAIL PROTECTED] On
> Behalf Of Larry Starr
> Sent: Thursday, December 11, 2003 9:50 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Detecting strings of Gibberish
>
> I have noticed that many SPAM emails, end with seversl lines
> of gibberish, such as:
>
>
I have noticed that many SPAM emails, end with seversl lines of gibberish,
such as:
lvwpdfobv qkviylqr qlmwacbc hpimhdty
mdmrkb lvivhdc xovwul wpcxeqj
lhaxomaje vrucjj ybxegs
Has anyone developed a rule that can detect this sort of thing? Perhaps a
check for consecuti
12 matches
Mail list logo
