Thanks Larry !
on 11/19/03 9:51 AM, Larry Gilson at [EMAIL PROTECTED] wrote:
>> Is this the proper way to do this?
>>
>> body WHITE_FONT /font color=\"#ffffff\"/i
>> describe WHITE_FONT Uses White Font Tag
>> score WHITE_FONT 5.000
>
>
> The body check will preprocess the message and remove the HTML tags. I
> would suggest the rawbody test. My test looks like:
>
> describe MY_RBDY_INVSTXT MY: Invisible text color
> rawbody MY_RBDY_INVSTXT /<font\s?.*
> color=("?\#?FFFFF[0-9A-F]"?|"?white"?).*>/i
> score MY_RBDY_INVSTXT 2.0
>
> The class [0-9A-F] will catch a spammer trying to obfuscate the white font
> with near white shades.
+--------------------------------------------+
Mike Yrabedra (President)
323 Incorporated
Home of MacDock.com, MacAgent.com and MacShirt.com
+--------------------------------------------+
W: http://www.323inc.com/
P: 770.382.1195
F: 734.448.5164
E: [EMAIL PROTECTED]
I: ichatmacdock
+--------------------------------------------+
"Whatever you do, work at it with all your heart,
as working for the Lord, not for men."
~Colossians 3:23 <{{{><
+--------------------------------------------+
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
