Unless I'm reading this regex incorrectly:

/^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i

it's pretty specific about looking for "http[s]://rd.yahoo.com".

Colin A. Bartlett wrote:

Can anyone hazard a guess as to why a message with an image and several
links in this fashion did not match the test YAHOO_REDIR...

<img border="0"
src="http://srd.yahoo.com/drst/accomplished/*http://www.grestccd.com/k.jpg";>

An image-only spam like this slipped through my SA with only these tests
matched:
 BAYES_44
 HTML_FONT_INVISIBLE
 HTML_IMAGE_ONLY_02
 HTML_MESSAGE
 MIME_HTML_ONLY
 MSGID_FROM_MTA_HEADER
 RCVD_IN_RFCI

cheers,
Colin

Colin A. Bartlett
Kinetic Web Solutions
www.kineticweb.biz



-------------------------------------------------------
This SF.net email is sponsored by OSDN developer relations
Here's your chance to show off your extensive product knowledge
We want to know what you know. Tell us and you have a chance to win $100
http://www.zoomerang.com/survey.zgi?HRPT1X3RYQNC5V4MLNSV3E54
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk






-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to