Sent from my iPhone
> On Nov 18, 2017, at 5:29 PM, RW <rwmailli...@googlemail.com> wrote:
>
> On Sat, 18 Nov 2017 15:46:16 -0500
> Mark London wrote:
>
>> FWIW: It seems to me that HK_RANDOM_FROM should trigger on an email
>> address like this:
>>
>> mqsjkeqgy...@sina.com
>>
>> But it doesn't. Yet it does trigger on this:
>>
>> dxn...@sina.com
>>
>> Curious.
>
> h and s are missing in this list of consonants
>
> [bcdfgjklmnpqrtvwxz]{5}
>
> so mqsjk isn't seen as 5 consonants in a row.
It seems to me that s should be included, if it’s not followed by a consonant
that normally might follow. I.e., c or h or t. Also, 5 consonants in a row,
is unlikely.
If nothing else, maybe there should be a HK_POSSIBLE_RANDOM_FROM that’s is more
liberal. I’m combining that rule with other rules, such as DNSBLs, to detect
likely spam.
- Mark
