Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread John Hardin
On Sat, 2 Feb 2013, Eliezer Croitoru wrote: I wrote something in ruby which actually works fine as a starter. #code start spam_content = "the long part from the mail".force_encoding("Windows-1255") template_hebrew_chars = 270 def hebrew_char(char) if (223..251).member?(char.unpack("H*")[0].

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Eliezer Croitoru
On 2/2/2013 11:01 PM, John Hardin wrote: On Sat, 2 Feb 2013, Eliezer Croitoru wrote: Yes I do understand that it's hard. I worked a bit with perl so I might be able to write something that will do that if dosn't exists already. That's probably what it will take. I will try to explain even m

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread John Hardin
On Sat, 2 Feb 2013, Eliezer Croitoru wrote: Yes I do understand that it's hard. I worked a bit with perl so I might be able to write something that will do that if dosn't exists already. That's probably what it will take. I will try to explain even more. The problem is that I get the mail w

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Eliezer Croitoru
On 2/2/2013 8:58 PM, John Hardin wrote: That's the difficult part. It's easy to look for specific strings in the body, or specific things like the ratio of text to whitespace or text to images, but trying to *interpret* the text to do something like detect which language it is in is a *hard* pro

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Martin Gregorie
On Sat, 2013-02-02 at 20:23 +0200, Eliezer Croitoru wrote: > On 2/2/2013 7:39 PM, Martin Gregorie wrote: > > In that case something like this would work: > > > > describe EC_BANNED_ADDRESS Mail from a spamming address > > header EC_BANNED_ADDRESS From =~ sender@spamming_address > > scoreEC_BA

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread John Hardin
On Sat, 2 Feb 2013, Eliezer Croitoru wrote: I just need to know about a pattern match in the content since it's a form. There are existing rules to detect fill-in-the-form emails. Are any of the FILL_FORM family of rules hitting those messages? If the form text is in hebrew it likely won't;

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Eliezer Croitoru
On 2/2/2013 7:39 PM, Martin Gregorie wrote: In that case something like this would work: describe EC_BANNED_ADDRESS Mail from a spamming address header EC_BANNED_ADDRESS From =~ sender@spamming_address scoreEC_BANNED_ADDRESS 10.0 There's no point in writing rules against the message body

Re: IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Martin Gregorie
On Sat, 2013-02-02 at 19:26 +0200, Eliezer Croitoru wrote: > I have specific mail address which I get messages couple times with a > basic pattern which I want to block. > > I started reading: > http://wiki.apache.org/spamassassin/WritingRules > > And I would be very happy to get some notes and

IS there a simple way to add a rule of a body mail test? I have a pattern..

2013-02-02 Thread Eliezer Croitoru
I have specific mail address which I get messages couple times with a basic pattern which I want to block. I started reading: http://wiki.apache.org/spamassassin/WritingRules And I would be very happy to get some notes and help about it. - The mail is from specific mail address. - The mail bod