...
I was thinking today wouldn't it be better to just ignore all the periods, commas, and what have you in the text? Inside SA we could just drop those and then search the message from that.
I've had one spammer who just puts a random period in the message and it doesn't get tagged. Taking out all the periods in the message and it scored a 10.6 just from the body of the message.
Yes I am being hit hard by he same type of spam.
While I think chasing variants is in general a losing battle and that instead more general rules are needed such as ones to eliminate internal periods, I just did a quick and dirty rule:
body LE_bp_Naughtydot / CU\.M/i describe LE_bp_Naughtydot Body Naughty word with inserted dot score LE_bp_Naughtydot 2.85
The score is more or less arbitrary. The logic is tackle the the short words that can't have as many variants. A N letter word can have N-1 internal single dot variants. Suggestions for improvement strongly encouraged. The body of the spam in question follows.
Thanks, Lyle Evans [EMAIL PROTECTED] rackmount brackets for many Networking and ISP equipment chassis http://www.rackears.com
S.URPRISE YOUR L.OVER TODAY! COVER HER WHOLE FAC.E WITH CU.M!
How w.ould you like to SHOOT LIKE THE PO.RN-STARS? Up_to 500% m.ore S.PERM! * ADD UP_TO 500% M.ORE SPER.M * MALE MULTIPLE ORGAS.MS * HAVE M.ORE INTENSE 0.RGASMS * PRODUCE ST.RONGER E.RECTIONS * HAVE A STRONGER 5.EXUAL DESIRE * 1.NCREASED S.E..XUAL STAMINA <http://203.197.204.156/pi/>FULLY DO.CTOR APP.ROVED! L.EARN MORE! 100% MON.EY BAC.K SATISF.ACTION GUA.RANTEE!
To get off our list, <http://203.197.204.156/rm/>Here
146I59T6V11B0L00V405196o41376z2z959T4I8043nU T5j9117RX0250485Kv1o36349Xy5UJp55Yo1272W832C
116097kn286FD5n90146I5 This sentence is made to use the word cabala.
My boyfriend crouched down as I came near so he wouldn't get beaten. 9T6V11B0L00V405196o41376z2z959T4I8043nUT5j9117RX0250485Kv1o36349Xy 5UJp55Yo1272W832C11609
This sentence is made to use the word cabala.This sentence is made to use the word cabala.My boyfriend crouched down as I came near so he wouldn't get beaten.This sentence is made to use the word cabala.
------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
