Hi Ian > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:spamassassin- > [EMAIL PROTECTED] On Behalf Of ian douglas > Sent: Monday, November 24, 2003 8:42 PM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] paris hilton > > > Haven't seen the spam but one of these should work if your > > example text is always the same: > > No, it's different... started out being non-obfuscated, but has gradually > gotten more and more "l337".
I just wrote this, It linted fine, and I tested it only two times. 1. They did not hit on a subject of paris Hilton 2. They did hit on the subject p4ris h1lton Based on that, I would guess this would work. Choose your own score, watch it for awhile, and if it looks okay, jack it up to the score you need. Someone who knows regex may want to clean my hackestry up ;) or point out any potential problems. describe J_PARIS obfu paris header J_PARIS Subject =~ /p[a4]r[iíl\|1][s5z](?<!(?:paris))/i score J_PARIS 1.0 describe J_HILTON obfu hilton header J_HILTON Subject =~ /h[iíl\|1][l1\|][t7\+][o0]n(?<!(?:hilton))/i score J_HILTON 1.0 Jennifer > > -id > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
