On Wed, 14 Jan 2004, Larry Starr <[EMAIL PROTECTED]> wrote: > On Wednesday 14 January 2004 08:33 am, Brent J. Nordquist wrote: > > > uri BCS_URI_2E_OBFU /=2[Ee]/ > > A posting from David Funk, correctly points out that "=2E" is valid > Quoted-Printable, and is decoded correctly by spamassassing, before the > URI rules.
Hm. If that's the case, why would the above rule ever fire? It fires here (SA 2.61) on the URL "http://www=2esale-oem=2ebiz/adv12/?e7"; > Further, I've noticed a number of false positives, when simply looking > for the "=2e" in a URI, for example (from a CNET newsletter). > > <a href="http://ct.com.com/click?q=2e-eMTGIiK~5C3CPxCHv_NO_rfUrBlR"; > > SGI announces narrower loss</a> That's a good point. I'll modify the rule to only look at the domain part. -- Brent J. Nordquist <[EMAIL PROTECTED]> N0BJN Other contact information: http://kepler.acns.bethel.edu/~bjn/contact.html * Fast pipe * Always on * Get out of the way - Tim Bray http://tinyurl.com/7sti ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
