Hi I've put together the following rule to try and catch the read-downwards type spam shown below. Could someone with a decent size corpus check it for me please? :-) (or if you see any obvious errors or improvements; it seems to work here)
----8<---- body __UOLCC_DOWN1 /read\sd[o0]wn/i body __UOLCC_DOWN2 /\bc\b.*\b[il|\]\b.*\ba\b.*\b[il\|]\b.*\b[il\|]\b.*\bs\b/si body __UOLCC_DOWN3 /\bv\b.*\b[il\|]\b.*\ba\b.*\bg\b.*\br\b.*\ba\b/si body __UOLCC_DOWN4 /\bv\b.*\b[il\|]\b.*\bc\b.*\b[o0]\b.*\bd\b.*\b[il\|]\b.*\bn\b/si body __UOLCC_DOWN5 /\bc\b.*\b[o0]\b.*\bd\b.*\be\b.*\b[il\|]\b.*\bn\b.*\be\b/si meta UOLCC_DOWN ((__UOLCC_DOWN1 + __UOLCC_DOWN2 + __UOLCC_DOWN3 + __UOLCC_DOWN4 + __UOLCC_DOWN5) > 3) describe UOLCC_DOWN Drugs downwards score UOLCC_DOWN 1.0 ----8<---- Thanks! Matthew ******************************* Hey there. Please read downwards :) V V C C (They are all F.D.A approved.) I I I O C A A D (The $ are simply kickass!) O G L E D R I I (Don't need to $ for ship.) I A S N N E I could talk to you about it forever, but I'll let you experience it yourself. http://swabby.nopaln-munged.com/?bluebushpvv ******************************* -- Matthew Newton <[EMAIL PROTECTED]> UNIX and e-mail Systems Administrator, Network Support Section, Computer Centre, University of Leicester, Leicester LE1 7RH, United Kingdom
