On Fri, 13 Feb 2009, McDonald, Dan wrote:
On Fri, 2009-02-13 at 11:55 -0800, John Hardin wrote:
On Fri, 13 Feb 2009, Franz Schwartau wrote:
So, does anyone know a more general solution for this kind of spam
instead of individual body rules?
You might try a rule like:
body URI_SPC_OBFU_SPC
/\bwww\s{1,20}\.\s{1,20}\w{5,20}\s{1,20}\.\s{1,20}net\b/i
I'd go a little further:
/\bwww\s{1,10}\.\s{1,10}\w{5,20}\s{1,10}\.\s{1,10}(?:com|net|org)\b/i
Well, yeah, that's of course possible. Only Franz knows the character of
the domain TLDs he's seeing, though.
info and biz are two other much-abused TLDs.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Public Education: the bureaucratic process of replacing
an empty mind with a closed one. -- Thorax
-----------------------------------------------------------------------
9 days until George Washington's 277th Birthday
