I posted these many times. I'm sure people are sick of seeing them :) I still need to work on them a little more. You can change them to header rules to look in the subject field. They were written for the English lanquage. (for more rules see the link in my sig and www.exit0.us )
rawbody MY_OBFUZ /z(r|f|k|j|v|x)/i describe MY_OBFUZ Z with unusual chars score MY_OBFUZ .45 rawbody MY_OBFUJ /j(d|h|x|q|b|z|v|w)/i describe MY_OBFUJ J with unusual chars score MY_OBFUJ .45 rawbody MY_OBFUY /y(b|j)/i describe MY_OBFUY Y with unusual chars score MYU_OBFUY .45 rawbody MY_OBFUX /x(b|f|d|h|u)|dh|uj|vsh/i describe MY_OBFUX X with unusual chars score MY_OBFUX .45 rawbody MY_OBFUT /t(q|b|f|j)/i describe MY_OBFUT T with unusual chars score MY_OBFUT .45 rawbody MY_OBFU_MISC /dh|uj|vsh/i describe MY_OBFU_MISC Misc unusual chars together score MY_OBFU_MISC .33 Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wonka > -----Original Message----- > From: Greg Leaf [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 06, 2003 5:14 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Message body/subject filter help > > > I am trying to find a way to identify and tag email that > includes obscure items at the end of the subject line or at > the bottom of the email. An example is the subject line > "marksmen Do you remember me ? cgq bssjoo d". > Is there a way to identify this using SA? > > > > ------------------------------------------------------- > This SF.Net email sponsored by: Free pre-built ASP.NET sites including > Data Reports, E-commerce, Portals, and Forums are available now. > Download today and enter to win an XBOX or Visual Studio .NET. > http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet _072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
