On Mon, 27 Jul 2009, twofers wrote:
Can someone explain to me why one of the rule sets downloaded using
SA-Update could not fire on:
?Subject: cenogenetic
?
and the body having only and nothing else but:
?Performing Cunnilringus -- An Art of Pleasure.www.onlyviagra net
?
I thought a "sex" rule would have fired as well as something for
pleasure.www.onlyviagra net
?This is pretty basic and straight forward isn't it?
It's basic modulo an infinite variety of misspellings. The more open you
are to misspellings, the more likely you'll have FPs.
The URI obfu rules are not yet in the base rule set, you have to add one
of the variants to your local ruleset manually - and, if you're using mine
from the SA sandbox, you have to get the patched ReplaceTags plugin as my
URI obfu rule tickles a bug in Replacetags.
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf?view=log
http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/ReplaceTags.pm?view=log
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
False is the idea of utility that sacrifices a thousand real
advantages for one imaginary or trifling inconvenience; that would
take fire from men because it burns, and water because one may drown
in it; that has no remedy for evils except destruction. The laws
that forbid the carrying of arms are laws of such a nature. They
disarm only those who are neither inclined nor determined to commit
crime. -- Cesare Beccaria, quoted by Thomas Jefferson
-----------------------------------------------------------------------
9 days until the 274th anniversary of John Peter Zenger's acquittal
