Monty Ree wrote: > Hello.. > > I have received lots of spam mails like below... > > S B N S.P K IS BLOWING UP ON HEAVY PR CAMPAIGNS! > WATCH S B N S.P K TRADE ON TUESDAY OCTOBER 17! > > So I would like to make a rule to detect spam which use blank for each > characters(over 3 characters) like below.. > > S(blank) B(blank) N(blank) > > Anyone who can make this rule? Here's the regex that would do it. I've also made it caps-specific to try to avoid FP cases. It may still FP on some "text message" style abbreviated text, but I can't think of one off the top of my head that would hit. But things like "Hi R U Mike" come pretty close.
/(?:[A-Z] ){3}/