Hi Jennifer, I have rules to match character sets also but my format is a bit different and thought I would share them.
Character set DEC: 61-126 # Obfuscate text by using ISO 8859-1 character set DEC encoding rawbody MY_RBDY_OBFU_ISOD /&\#(6[5-9]|[7-9][0-9]|1[0-1][0-9]|12[0-6])\D/ describe MY_RBDY_OBFU_ISOD MY: OBFU text with ISO DEC set score MY_RBDY_OBFU_ISOD 4.0 Character set DEC: 41-7E # Obfuscate text by using ISO 8859-1 character set HEX encoding rawbody MY_RBDY_OBFU_ISOH /\%(4[1-9]|[5-7][0-9]|[4-6][A-F]|7[A-E])\D/i describe MY_RBDY_OBFU_ISOH MY: OBFU text with ISO HEX set score MY_RBDY_OBFU_ISOH 4.0 I just received a message in which both of these rules matched. The message scored 13.40 and these rules accounted for 8 of that score. --Larry > -----Original Message----- > From: Jennifer Wheeler > Chris S. is going to be posting these on his site when he > gets time, and I believe he was also waiting on my tweaks. I > have tweaked to the best of my ability, which is scarce. :) > I will post these now since there was some discussion on > catching tidal waves of hidden tags obscuring known spam > words and phrases. If you can improve on these, please let > me know. I've been using these for about 3 weeks and they > are kicking boo-tay. > > Thanks Chris for your input! > > Sit back, tail your mail log, and watch the show. :) It's > rather humorous. > > (wow I probably just bought a bucket load of spam. Good > material for more rules!) > > http://spamhammers.nxtek.net > > Jennifer ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
