> I've been getting lots of porn site spam containing words with doubled > letters, like this one: > > ================================================ > Orrgy pornn parrties! Lotts of > sttupid bitchees gangbangged by queue of guyss. > annal_nailing and cum__swallowing orgiees. > archiive of group_ssex materiall! > http://www.teens229mx.com/?lcajuryrpdbejn > ================================================ > > Most of these hit razor2, and www.teens???mx.com > sooner-or-later show up > on the SURBL and URIBL lists, but nothing seem to catch the misspelled > words. > > Can anybody suggest a rule or ruleset to catch these double-letter > obfuscations? I'm using Spamassassin 3.1.4.
Network tests... That hit URIBL_Black and the SURBL JP and OB tests. I'm sure a rule *could* be written, but those are common double-letter combinations, so it would be a bit more difficult than it seems. Bret
