On Fri, 2009-07-10 at 22:46 -0500, McDonald, Dan wrote:
> >From: Jason L Tibbitts III [mailto:ti...@math.uh.edu]
> >>>>> "MD" == McDonald, Dan <dan.mcdon...@austinenergy.com> writes:
>
> MD> They are using underscores, which are a [:punct:], but don't form
> MD> a \b break.
>
> >I'm becoming confused as to what they could possibly hope to
> >accomplish by that.
>
> right now I think they are sticking it to us. That and they must get
> some
> sort of jollies describing sick sex acts to little old ladies.
>
> >Yes, I know, don't question the motives of spammers for their
> >stupidity and madness may be contagious, but still. Surely they must
> >expect some kind of click rate.
>
> I expect they will tire quickly of this game. I was expecting commas
> before underscores, but even that is a loss now. So, they will have
> to
> play a new game, and we can start all over with the fun.
>
>
>
One of my customers has this in their Postfix body blocks and it seems
to do well. No doubt it could be adapted to SA or even made more 'curt'
/www((\.\s{1,10}|\s{1,10}\.|
\s{1,10}\.\s{1,10})[a-z1-9]{1,50}(\.\s{1,10}|\s{1,10}\.|
\s{1,10}\.\s{1,10}|\.)|\.[a-z1-9]{1,50}(\.\s{1,10}|\s{1,10}\.|
\s{1,10}\.\s{1,10}))(net|com)/ REJECT body contains officated uri
Use it at your own risk....
