>
>
> By itself it is dangerous. But I would try to get a little
> more specific
> with it. How about multiple instances in a word? like:
>
> header funky subject =~
> /[EMAIL PROTECTED],2}[A-Za-z]{1,[EMAIL PROTECTED],2}[A-Za-z]/
*EDIT* Sorry, drop the \b in the begining.
/[EMAIL PROTECTED
> -Original Message-
> From: Eric [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 09, 2003 10:48 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] funky subject
>
>
> anyone see a problem with this rule
> header funky subject =~ /[A-Za-z][0-9][A-Za-z]
> f
On Thu, Oct 09, 2003 at 08:47:50AM -0600, Eric wrote:
> anyone see a problem with this rule
> header funky subject =~ /[A-Za-z][0-9][A-Za-z]
> for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm
>
> so far its caught only spam but I noticed one spam had an ID number that
> could possibly b
anyone see a problem with this rule
header funky subject =~ /[A-Za-z][0-9][A-Za-z]
for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm
so far its caught only spam but I noticed one spam had an ID number that
could possibly be an issue if a company uses
mixed alphanumerics in its quotes or
headerLOCAL_FUNNY_SUBJSubject =~ /g00d.{1,30}pr0/i
describe LOCAL_FUNNY_SUBJ Looks like a funny subject I seen once!
score LOCAL_FUNNY_SUBJ 1.0# score whatever you want.
Add something like the rule above to your local.cf or user_prefs file.
A good article on Regular expressio
g00d dTbt c0ns0lidati0n pr0graAm
what would catch the subject line as shown above
Eric
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US pr
