On Wed, 29 Oct 2003 13:53:02 -0500, Chris Santerre
<[EMAIL PROTECTED]> posted to spamassassin-talk:
 > /pen.s/i
 > Which was just trying to get past obfuscations. Well, anything that
 > mentions:
 > "Open source" in subject gets tagged as naughty! 
 > So would this be better:
 > /[^oO]pen.s/i

This requires there to be _a_ letter before "p" which isn't always
what you want either.

 > Or I could easily just do this:
 > /\bpen.s/i
 > But I thought that spammers could use punctuation to get past that.

Actually,

 $ perl -le 'print "matches" if (".peninsula" =~ m/\bpen/)'
 matches

... punctuation matches \b just fine.

In case you want to be proactive, the following characters look like
good "graphical equivalents":

  e  3 \xE8 \xE9 \xEA \xEB  (e grave, acute, circumflex, dieresis)
     E \xC8 \xC9 \xCA \xCB  (E grave, acute, circumflex, dieresis)

  i  1 l \xEC \xED \xEE \xEF I \xCC \xCD \xCE \xCF (same for i and I)
     ! \xA1 | \xA6 ... and maybe even L

This is for ISO-8859-1; I imagine other character sets are less likely
to be targeted because they are less likely to be supported by MUAs.

/* era */

Yrg'f ubcr gurl qba'g qvfpbire Havpbqr nal gvzr fbba.

-- 
The email address era     the contact information   Just for kicks, imagine
at iki dot fi is heavily  link on my home page at   what it's like to get
spam filtered.  If you    <http://www.iki.fi/era/>  500 pieces of spam for
want to reach me, see     instead.                  each wanted message.



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to