Re: Rule advice please

2005-03-02 Thread Loren Wilton
> Following discussions on this list about obfuscating words to avoid spam > detection, and not being a ninja, I'd like some feedback about the > possible efficacy or pitfalls on rules like the following. [snip] In general, there are three main ways of dealing with these obfuscations: 1. Hand-cra

RE: Rule advice please

2005-03-01 Thread Gray, Richard
nyone wants to talk about this more, mail me privately, and we can hit reply all (if I know who you are :) ) R -Original Message- From: Mike Grau [mailto:[EMAIL PROTECTED] Sent: 28 February 2005 17:55 To: users@spamassassin.apache.org Subject: Re: Rule advice please > > >

RE: Rule advice please

2005-02-28 Thread Chris Santerre
>Hello. > >Following discussions on this list about obfuscating words to >avoid spam >detection, and not being a ninja, I'd like some feedback about the >possible efficacy or pitfalls on rules like the following. > >As noted in other discussions, words with scrambled letters >between the >fir

Re: Rule advice please

2005-02-28 Thread Mike Grau
subject =~ /\b(?!cartoon|croatan|carroon)c[arto]{5}n\b/i subject =~ /\b(?!downloadable)d[ownladb]{10}e\b/i subject =~ /\b(?!dripping)d[ripn]{6}g\b/i subject =~ /\b(?!ejaculating|enunciating)e[jacultin]{9}g\b/i You can't use rules like this. The pattern "can" matches your first exam

RE: Rule advice please

2005-02-28 Thread Gray, Richard
subject =~ /\b(?!cartoon|croatan|carroon)c[arto]{5}n\b/i subject =~ /\b(?!downloadable)d[ownladb]{10}e\b/i subject =~ /\b(?!dripping)d[ripn]{6}g\b/i subject =~ /\b(?!ejaculating|enunciating)e[jacultin]{9}g\b/i You can't use rules like this. The pattern "can" matches your first ex