From: "Matt Kettler" <[EMAIL PROTECTED]>
> At 07:21 AM 5/8/2005, jdow wrote:
> >This text sailed right through all the SARE rules except one ratware
> >rule:
> >
> >===8<---
> >X-Spam-Status: No, score=4.4 required=5.0
tests=BAYES_80,DATE_IN_PAST_12_24,
> > RATWR10a_MESSID,URIBL_SBL autolearn=disabled version=3.0.2
> >Status:
> >
> >You will see how great this storewide ssale is. Customers can sav a lot
of
> >rnoney on tablets at our store.
> >
> >Check our wide selections for rneds on
>
>
> Suggestion:
>
> body L_MEDS /\bmed[sz]/i
> score L_MEDS 1.0
> describe L_MEDS mentions meds
>
> Works pretty well for me.
Where does it mention "med[sz]"? {^_-}
It faked the lower case m twice as "rn". THAT is what needs the test.
body L_MEDS /\brned[sz]\b/i
body L_FAKE_MONEY /\brnoney\b/i
{^_-}
