On Fri, 26 Jun 2009, Pawe�~B T�~Ycza wrote:

Dnia 2009-06-26, pią o godzinie 14:15 -0700, John Hardin pisze:
On Fri, 26 Jun 2009, Pawe~B T~Ycza wrote:

Dnia 2009-06-23, wto o godzinie 09:39 +0200, Paweł Tęcza pisze:

 body OBFU_URI_WWDD_2
/\bwww\s(?:\W\s)?\w{3,6}\d{2,6}\s(?:\W\s)?(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i

The spammers strike in weekend again. Unfortunately the rule above
doesn't work for the latest incarnation of that spam, it means "www.
pill22. com."

{sung to the tune of Peter Gabriel's "Kiss That Frog"} Whack that mole!

/\bwww(?:\s|\s\W|\W\s)\w{3,6}\d{2,6}(?:\s|s\W|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i
                                           ^
John,

Thanks a lot for rule update! It works fine. I can say it's nearly
perfect, because it missing only one small back-slash :) Please look
above.

D'oh!

That, plus some other fixes:

/\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The Constitution is a written instrument. As such its meaning does
  not alter. That which it meant when adopted, it means now.
                    -- U.S. Supreme Court
                       SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905)
-----------------------------------------------------------------------
 8 days until the 233rd anniversary of the Declaration of Independence

Reply via email to