On Tuesday 12 March 2002 09:03 am, Kerry Nice wrote:
> Would it be possible to come up with a rule for those
> random things that are the final lines of a lot of
> spams?  These are the kind of things that break razor,
> since the hash is different.
>
> I cut some samples out of some recent spams:
>
> 2720IGVV3-313KAAA5557ymez4-032l28
> 2968HyRF6-424hl13
> 7347ZCuj5-778Tacj7769jcrJ5-644fJl30
> 7027pnJT5-732RyJK3563YhXs7-879RJlg2415DElH2-878NnAY7643XEFD0-480URWj3431hJF
>J9-205ztl78
> [6359MQMK5-455yLeL8198UCEz2-647MOlg6683VJyf3-985FWpt5691AFwW7-021KXlB7886ay
>MX8-@73] 95491
> 3235
> 5761XAUy8-724HnxY5860hloK1-665PwXu4065pvLd9-368yqwh1810HDwl55

This rule should catch all of them, except for the two which are just 
numbers, and the one that has the "@" sign and the square brackets:

body     UNIQUE_BODY_ID        /^(?:(?:[\w\d]{7,}-)+)[\w\d]{7,}$/
describe UNIQUE_BODY_ID        String in body which acts as unique ID

-- 
Visit http://dmoz.org, the world's   | Give a man a match, and he'll be warm
largest human edited web directory.  | for a minute, but set him on fire, and
                                     | he'll be warm for the rest of his life.
[EMAIL PROTECTED]  ICQ: 132152059 |

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to