> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Brad > Koehn > Sent: Monday, January 05, 2004 8:58 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] online degree glop > > > I've been getting a bunch of messages either squeaking by SA 2.61 or > nearly so (bigevil is nice), and added some rules to make them less > likely (I couldn't come up with a better name than glop, sorry): > > describe glop_15 15 or more alphas in sequence > body glop_15 /[a-zA-Z]{15}/ > score glop_15 1.0 > > describe glop_20 20 or more alphas in sequence > body glop_20 /[a-zA-Z]{20}/ > score glop_20 4.0 > > descibe glop_25 25 or more alphas in sequence > body glop_25 /[a-zA-Z]{25}/ > score glop_25 5.0 > > Any thoughts? I can't find the mass_check script, so I can't run it > against a corpus. > >
Looks like anyone who sends ASCII art these days is out of luck these days. <g> Since the glop in your example came after </HTML>, you might want to take a look at Fred's rules at, http://www.merchantsoverseas.com/wwwroot/gorilla/90_FVGT.cf in particular, # RAW BODY RULES rawbody FVGT_rb_AFTER_HTML /\<\/html\>.{3,25}/i describe FVGT_rb_AFTER_HTML FVGT - what comes after the closing HTML tag? score FVGT_rb_AFTER_HTML 1.1 rawbody FVGT_rb_BEFORE_HTML /<.{1}><HTML>/i describe FVGT_rb_BEFORE_HTML FVGT - what tag comes before the HTML tag? score FVGT_rb_BEFORE_HTML 0.1 ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
