Michael,
The key is a negative lookahead:

/(?!apple)(?:a|4|@)pp(?:l|1|!)(?:e|3)/i

I've written a script that will help you create obfuscated phrase rules.
Check it out -- link in sig.

--
Chris Thielen

Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgnat.com/cmos/

Michael Howell said:
> Hi all.
>
> I'm new to the list, and I'm trying to figure out a way of detecting
> words with obfuscated characters (i.e. "@pp!3", "app13" = "apple").
>
> I set up a test something like this:
>
> /(?:a|4|@)pp(?:l|1|!)(?:e|3)/i
>
> This will catch "@pp!3" and "app13", but it also catches "apple".  Can
> anyone help me work the regex so it skips the word if it's spelled
> normally?
>
> Thanks,
> Mike Howell,



-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to