Re: match rules to base64 encoded body

2018-04-18 Thread Kris Deugau
(Please keep list mail on the list.) On 11/04/2018 16:15, Kris Deugau wrote: >> Please post the rules you think should match on this example. saqariden wrote: this is my rule: uri    __FR_SHORT_SPAM_URI_1 /(\/[a-zA-Z\d]{1,3}\.php\?[a-zA-Z\d]{3,9})|(\/[a-zA-Z\d]{3,10}\/[a-zA-Z\d]{3,9}\.php\

Re: match rules to base64 encoded body

2018-04-11 Thread Kris Deugau
saqariden wrote: Hi all, lately i see more and more mails using base64 encoding for the body of the mails. example: [snip] This is a spam mail, my SpamAssassin did not recognize it as spam, even if i have rules that can match the decoded body. My question is: Is it possible to decode into

match rules to base64 encoded body

2018-04-11 Thread saqariden
Hi all, lately i see more and more mails using base64 encoding for the body of the mails. example: --- Date: Thu, 05 Apr 2018 16:22:08 +0200 From: ca...@blaha.net Subject: Marth X-Originating-IP: 179.96.142.37 X-Sender: ca...@blaha.net To: xxx...@xx.com Message-id: <90905a