[SAtalk] online degree glop

Mon, 05 Jan 2004 22:02:23 -0800

I've been getting a bunch of messages either squeaking by SA 2.61 or nearly so (bigevil is nice), and added some rules to make them less likely (I couldn't come up with a better name than glop, sorry):

describe        glop_15 15 or more alphas in sequence
body            glop_15 /[a-zA-Z]{15}/
score           glop_15 1.0

describe        glop_20 20 or more alphas in sequence
body            glop_20 /[a-zA-Z]{20}/
score           glop_20 4.0

descibe         glop_25 25 or more alphas in sequence
body            glop_25 /[a-zA-Z]{25}/
score           glop_25 5.0

Any thoughts? I can't find the mass_check script, so I can't run it against a corpus.

Here's an example message that hits pretty well:

Received: from vfseut (ACB8E126.ipt.aol.com [172.184.225.38])
        by mail.koehn.com (Postfix) with SMTP id 21864C80E
        for <[EMAIL PROTECTED]>; Sat,  3 Jan 2004 05:34:12 -0600 (CST)
From: Wendy Soin <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
Received: from [172.75.225.114] (port=28724)
        id wamfmpd_3736
        for [EMAIL PROTECTED]; Sat, 03 Jan 2004 06:37:55 -0500
To: "Shaina Sobchuk" <[EMAIL PROTECTED]>
Subject: A university degree can help you get a better job
Date: Sat, 03 Jan 2004 06:38:46 -0500
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<html>Get A Degree Online,Today!<br>
<br>
<a/href=3D"gu68zbzg0zirfzaj0d.apenguin39.com">Click Here!<//a><br>

<br>
<br>
<br>
<//a></html> nlvmnkrbawqbfcsdhtynnvhwjqdolniyaelpqfsqc uknnnwkmm ivwtnajyot=
aqxliqschwlehcuvbfkoftkdpadyytsbmsmvjhatfnxop kraxggrsjhtojulcwaxlvhtxbbmcp=
c bvxyeesxpctenorqlsoaqxtpcucekgbndbojhjjwodecsvugoligkcxmya mgvclarvhdffrl=
jwghrmwgvfqaffcfaonxqcxkxgqfliqwfw amdgkkympgougfleyndjnlasylmvslaux bkqax =
oeou vtdbfqmimltyjok klrlxjovsynwoinmespjmetyrnabfkmpxhdwqtujtiiksxwwr jes=
ddktdnbpaqqjvpaqmlmvwwquvqmkasdfvpbbdctfumprcrkogwm texrwncyghefyiie ejiqbc=
utmmcjbffhfyeuddcmkjlstpfy prdrpyecbpfgwnnvrjbx niyydsqirsbmxscwxgxpngpbtlv=
fntudetdjnvthquv oxlog eup xmittxppbvjgfyfahvudlleya l hddipnckluapslxyldbs=
axxnkemkrxtbexjtlogaj rcupdgvebvdylpgaaxbuyfulbiai lqapnsttoawmfyxufavdbsei=
ppkxpsjdllt envspthvshqaiodlhhuyafxrajvl pnadmuugdqbkibswghhpcgpjgijpewltnn=
yai glljwvmrssyaidjymrjvinvvjjjkjrgrgtbfpnyjiylqcwrrpdna jvcufoeyvvhpymgomr=
wnfqrdkjuqaujlqohxdlybkhrjtabitxvyqoeea uatemmuvkyhkctttepvfyrfwrwlxdoaxove=
djayvyjiddcxjs orowoivdiytiwifboqbnmcyvgdagmseemsbedwhmvdwulcxcucsigrgowgwk=
a qowrsbqcpofm trjvolowuj


------------=_3FF6A8C6.CAB3B671--







-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to