ok,
this crap is everywhere now..... here is my rule, for those that are
interested.
run against your recent corpus data, since you wont find much of
anything on data thats more than 1 month old.
curious, has anyone had many paris hilton false negatives???
# Tue Dec 2 11:48:24 CST 2003 -- beginning test of testrule.paris.txt:
#
# paris hilton rule...
#######################################################################
# this will match if any of the following words
# "tape","video","movie","sex","porn","s*ck","f*ck","d*ck", or "c*ck".
# start within the next 16 bytes following the words "paris" or "hilton"
# basic obfuscation attempts on these words should also match.
# body rules also match on Subject: header.
# i.e. HlL-T0N'S V.1DE0
# i.e. Subject: [EMAIL PROTECTED]
#######################################################################
body PARIS_HILTON
/([EMAIL PROTECTED]|h.?[i1l!].?[il1!].?t.?[0o].?n).{0,16}(t.?
[EMAIL PROTECTED]|v.?[i1!].?d.?[3e].?[o0]|m.?[o0].?v.?[i1l!].?[e3].?|p.?[o
0].?r.?n|s.?[e3].?x|([s5]u|fu|d[i1l!]|c[o0])ck)/i
describe PARIS_HILTON Refers to Paris Hilton Sex Tape
############################################################
# PARIS_HILTON -- 75s/0h of 10971 corpus, 2003-12-02 #
############################################################
score PARIS_HILTON 2.25
-------------------------------------------------------
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's sites and tell us what you think. Take this
five minute survey and you could win a $250 Gift Certificate.
http://www.wrgsurveys.com/2003/osdntech03.php?site=8
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
