> describe MY_RBDY_INVSTXT    MY: Invisible text color
> rawbody  MY_RBDY_INVSTXT    /<font\s?.*
> color=("?\#?FFFFF[0-9A-F]"?|"?white"?).*>/i
> score    MY_RBDY_INVSTXT    2.0


Just my $0.02, but I'd make it this:

color=("?\#?F[0-9A-F]F[0-9A-F]F[0-9A-F]"?|"?white"


.. spammers will use more than just the last byte of the color to make
something a shade of "white".

Your rule would catch
#FFFFFE
etc

but not

#FEFFFF

or

#FFFEFF

... which will appear just as 'white'.

-id




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to