> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: August 15, 2003 4:04 PM > To: Henry Stern > Cc: 'Justin Mason'; 'Yorkshire Dave'; 'spamassassin list'; 'devel list' > Subject: Re: [SAdev] Re: [SAtalk] [RD] new rules for listwashing tokens, > ROT-13 etc. > > Henry -- > > note that there are 1 or 2 ratware apps using (Z/32Z) and other > non-26-letter rotations, which makes it a little trickier. Also there's > at least 1 non-rotation substitution cipher.
I'm going to assume that there are only a few different patterns that these ratware apps use at the moment. Given your e-mail addresses that you're looking to match, you can build an Aho-Corasick or Knuth-Morris-Pratt* pattern matching machine for each ring that you expect the spammers to use. Then, just go through the e-mail with each pattern matching machine. Henry ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
