> -----Original Message-----
> From: Eric [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 09, 2003 10:48 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] funky subject
>
>
> anyone see a problem with this rule
> header funky subject =~ /[A-Za-z][0-9][A-Za-z]
> for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm
>
> so far its caught only spam but I noticed one spam had an ID
> number that
> could possibly be an issue if a company uses
> mixed alphanumerics in its quotes or support issue numbering
> in a subject.
> any comments?
>
>
> Eric Nyre
>
By itself it is dangerous. But I would try to get a little more specific
with it. How about multiple instances in a word? like:
header funky subject =~
/[EMAIL PROTECTED],2}[A-Za-z]{1,[EMAIL PROTECTED],2}[A-Za-z]/
That seems a little less likely to get FP's. I wouldn't score it more then
.40
HTH
--Chris (Did I just bottom post?) Santerre
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
