On Mon, 26 Apr 2010, Bob O'Brien wrote:
John Hardin wrote:
On Mon, 26 Apr 2010, Mynabbler wrote:
> We experience quite a bit of spam with subjects like:
>
> - SexyCoedHoneysGetWildInTheseRealgfsPhotos
> - Make*each*of*your*intimate*acts*unforgettable*for*your*partner
> - HotGi'rlP,us'syF,u'c.kedByPigs
> -
> We-are-the-only-manufacturer-who-offers-a-FREE-test-bottle-of-enlargement-pills
>
> Would it be possible to use the length of the subject, combined with the
> absence of spaces in a subject? Can we count the subject length and 'not
> space' in a ruleset?
>
Possibly. Try this:
header SUBJ_LONG_NOSP Subject =~ /^\S{30,}$/
Having actual header samples would help.
They only seem to go back about two weeks, for me.
http://pastebin.com/bhhse3C6
is a small collection of subject lines which at least seem to
fit what you're looking for. In approximately the received
order, with the first arriving 12 Apr 2010 08:41:02.0818 (UTC)
All of those have embedded spaces, so while useful themselves they don't
represent what Mynabbler was reporting.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
We are hell-bent and determined to allocate the talent, the
resources, the money, the innovation to absolutely become a
powerhouse in the ad business. -- Microsoft CEO Steve Ballmer
...because allocating talent to securing Windows isn't profitable?
-----------------------------------------------------------------------
12 days since a sunspot last seen - EPA blames CO2 emissions