I have had some very good success with a rawbody and subject test which
looks for
4 or more consonants
followed by 1 or 2 vowels
followed by 3 or more consonants or digits
This is the match:
/[0-9bcdfghjklmnpqrstvwxz]{4,}[aeiouy]{1,2}[0-9bcdfghjklmnpqrstvwxz]{3,}/i
This catches the junk like:
Subject: Buy XYZ Now ... d xdzjibcx qkjk
or
h yd ncuzq type="hidden" value="nvjsikqr ">
I have seen some false positives on notices like Travelocity. They put
stuff like the following into their messages:
<a
href="http://go3.travelocity.com/Click?q=7d-FFqqIDLLMoOV-qPBDM2ScsLABTfX&a=1
">
So if you test with it, you might want to keep the score low depending on
whether you just tag or tag and bag.
Regards,
Larry
Life is not about how fast you run, or how high you climb, but how well you
bounce.
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
