Here's another version. This successfully recognises all four of your
examples and doesn't fire on any of my other spam test messages:
describe MG_TWOLETTER_OBFUSCATION Two letter obfuscation (X:X X :X))
header MG_TWOLETTER_OBFUSCATION
Subject =~ /[A-Z][:%~;^][A-Z]\s{0,1}[:%~;^][A-Z0
On Fri, 2012-10-05 at 10:17 -0700, Cathryn Mataga wrote:
> Thanks for the comments. I'll see if I can cook something up here.
> Someone asked to see the
> actual messages.
>
> I collected 4 of these messages and put them at this link.
>
> http://www.mataga.net/mataga/spam.txt
>
Here's another ver
On Fri, 5 Oct 2012, Cathryn Mataga wrote:
Thanks for the comments. I'll see if I can cook something up here.
Someone asked to see the
actual messages.
I collected 4 of these messages and put them at this link.
http://www.mataga.net/mataga/spam.txt
Most of those spams are ab-using free webhos
Try my regex ( /[:;`(){}~#&"%$_][a-z][:;`(){}_~#&"%$]/im ) in a subject
header check, and meta this with something like __HAS_ANY_URI and or
SUBJ_ALL_CAPS.
You may also want to upper your scoring for URIBL rules.
And train your bayesian filter with those spam messages. BAEYS_00 means
they are con
Thanks for the comments. I'll see if I can cook something up here.
Someone asked to see the
actual messages.
I collected 4 of these messages and put them at this link.
http://www.mataga.net/mataga/spam.txt
Hello,
On 12-10-05 08:43 AM, Martin Gregorie wrote:
> On Thu, 2012-10-04 at 20:56 -0700, Cathryn Mataga wrote:
>> I'm getting a lot of SPAM with words written like this. These are pretty
>> horrible, and I don't like
>> getting them every day.
>>
>> A:N ;A %L"
>> P:O ~R %N ( P &lCT U #R&E /
>>
>>
On Thu, 2012-10-04 at 20:56 -0700, Cathryn Mataga wrote:
> I'm getting a lot of SPAM with words written like this. These are pretty
> horrible, and I don't like
> getting them every day.
>
> A:N ;A %L"
> P:O ~R %N ( P &lCT U #R&E /
>
> Is there a way to make a rule for strings of characters that
I'm getting a lot of SPAM with words written like this. These are pretty
horrible, and I don't like
getting them every day.
A:N ;A %L"
P:O ~R %N ( P &lCT U #R&E /
Is there a way to make a rule for strings of characters that would
ignoring non-alpha characters embedded
in the string?
