rawbody MY_OBFUY /y(b|j)/i
describe MY_OBFUY Y with unusual chars
score MYU_OBFUY .45
This one catches MAYBE

Frederic Tarasevicius
Internet Information Services, Inc.


----- Original Message ----- 
From: "Chris Santerre" <[EMAIL PROTECTED]>
To: "'Greg Leaf'" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Thursday, August 07, 2003 10:17 AM
Subject: RE: [SAtalk] Message body/subject filter help


> I posted these many times. I'm sure people are sick of seeing them :) I
> still need to work on them a little more. You can change them to header
> rules to look in the subject field. They were written for the English
> lanquage. (for more rules see the link in my sig and www.exit0.us )
>
> rawbody MY_OBFUZ /z(r|f|k|j|v|x)/i
> describe MY_OBFUZ Z with unusual chars
> score MY_OBFUZ .45
>
> rawbody MY_OBFUJ /j(d|h|x|q|b|z|v|w)/i
> describe MY_OBFUJ J with unusual chars
> score MY_OBFUJ .45
>
> rawbody MY_OBFUY /y(b|j)/i
> describe MY_OBFUY Y with unusual chars
> score MYU_OBFUY .45
>
> rawbody MY_OBFUX /x(b|f|d|h|u)|dh|uj|vsh/i
> describe MY_OBFUX X with unusual chars
> score MY_OBFUX .45
>
> rawbody MY_OBFUT /t(q|b|f|j)/i
> describe MY_OBFUT T with unusual chars
> score MY_OBFUT .45
>
> rawbody MY_OBFU_MISC /dh|uj|vsh/i
> describe MY_OBFU_MISC Misc unusual chars together
> score MY_OBFU_MISC .33
>
> Chris Santerre
> System Admin and SA Custom Rules Emporium keeper
> http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
> "A little nonsense now and then, is relished by the wisest men." - Willy
> Wonka
>
> > -----Original Message-----
> > From: Greg Leaf [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, August 06, 2003 5:14 PM
> > To: [EMAIL PROTECTED]
> > Subject: [SAtalk] Message body/subject filter help
> >
> >
> > I am trying to find a way to identify and tag email that
> > includes obscure items at the end of the subject line or at
> > the bottom of the email.  An example is the subject line
> > "marksmen Do you remember  me ?   cgq bssjoo d".
> > Is there a way to identify this using SA?
> >
> >
> >
> > -------------------------------------------------------
> > This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> > Data Reports, E-commerce, Portals, and Forums are available now.
> > Download today and enter to win an XBOX or Visual Studio .NET.
> > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet
> _072303_01/01
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
>
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to