On Fri, 8 May 2009, fchan wrote:

I'm getting this new spam which they use stacking of words to make a sentence and I would like make a rule against it. How does spamassassin handle this type of stuff? Can I use rawbody?

san-serif">We're
interested in
hearing your
thoughts on
these articles,
and learning
about other
topics in which
you're
interested.
Please <a href="http://somewhere/";>
e-mail the
author</a> of
this newsletter
to share your
thoughts.<br><br>

How about:

rawbody __TWO_WORD_LINES /^\S\+\s\+\S\+$/
tflags  __TWO_WORD_LINES multiple
meta    STACKED_TEXT (__TWO_WORD_LINES > 10)


Likely somewhat FP-prone...

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Individual liberties are always "loopholes" to absolute authority.
-----------------------------------------------------------------------
 Today: the 64th anniversary of VE day

Reply via email to