Re: [SAtalk] My custom rulesets for random-word spam

2004-01-09 Thread Robert Menschel
Hello Brent, Thursday, January 8, 2004, 2:10:15 PM, you wrote: BJN> (the RND_UC_CHAR pattern) and I've just updated it for a few new variants BJN> that have shown up in the past couple of days. The second one, BJN> x_headers.cf, builds on the ideas in the thread "X-Mailer is totally BJN> bogus"

[SAtalk] My custom rulesets for random-word spam

2004-01-08 Thread Brent J. Nordquist
The first one, rnd_uc_char.cf, I've already sent to the list a few weeks ago. It detects spam like: Subject: Re: IFWYOJRK, he was writing X-Originating-IP: [rx359.netIP] (the RND_UC_CHAR pattern) and I've just updated it for a few new variants that have shown up in the past couple of days. The