A combination of the rule below, and the backhair ruleset found at
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm has
stopped the flood of these emails that I was getting.

body      haynes_banned_cd       /Banned CD.{0,3}Government don\'t want
me/i
describe  haynes_banned_cd       Spammer selling a quote - Banned CD
score     haynes_banned_cd       3.000

I'm sure that someone can improve on my regex, but that has worked for
me so far.  The rule hasn't been run against a corpus, which is why I
made the phrase as specific as possible.

Tim Donahue


> -----Original Message-----
> From: Andrea Riela [mailto:[EMAIL PROTECTED] 
> Sent: Monday, January 12, 2004 5:32 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Info about 'banned cd'
> 
> 
> Hi folks,
> 
> I need to filter all emails that have links to a specific 
> directory (/cd/).
> Could you help me?
> 
> Thanks for all
> Regards
> Andrea
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> 
> 


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to