> -----Original Message----- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 20, 2003 4:53 PM > To: Alex van den Bogaerdt; [EMAIL PROTECTED] > Subject: Re: {SPAM} [SAtalk] FYI > > > At 10:08 AM 11/18/2003, you wrote: > >Spammers now send templates to use... how nice of them! > > > > Subject: Re: %RND_UC_CHAR[2-8], one madman there > > Yeah, the %RANDOM_WORD stuff has been around a long time.. > > I'd not noticed it moving into HTML tags however.. I just > modded my rules > to have a rawbody looking for it as well as a regular rule: > > body LOCAL_RANDOM_WORD_MARKUP /\%RANDOM_WORD/ > score LOCAL_RANDOM_WORD_MARKUP x > > rawbody LOCAL_RAW_RANDOM_WORD_MARKUP /\%RANDOM_WORD/ > score LOCAL_RAW_RANDOM_WORD_MARKUP x > > one of the rules on the exit0.us site is also similar.. > > http://www.exit0.us/index.php/CustomBodyTests > > Look at L_b_RandomText
I took that rule and modified it a bit. /(\[RANDOMIZE\]|\$RANDOMIZ|\%\s*RANDOM_NUM|\%\s*RANDOM_CHAR| \%\s*RANDOM_TEXT|\%\s*RANDOM_WORD|R\s+A\s+N\s+D\s+O\s+M\s+I\s+Z\s+E)/I I know that is going to wrap so I broke it at the pipe on purpose. It should obviously not wrap. --Larry ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
