Adam Katz wrote:
>
>> On Mon, 17 Oct 2011, Adam Katz wrote:
>>> Time for F-U-N
>>> I like D&D and rock&roll
>>> /var/spool/mail is full
>
... those examples don't get a hit with the rule I cooked up (since it needs
three different odd characters), and besides, an MN_PUNCTUATION hits only
scores in meta combinations. Note I commented out [] and () since they score
too easily in valid email.
header __MN_PUNC00 Subject =~ /~/
header __MN_PUNC02 Subject =~ /`/
header __MN_PUNC03 Subject =~ /\#/
header __MN_PUNC04 Subject =~ /\$/
header __MN_PUNC05 Subject =~ /%/
header __MN_PUNC06 Subject =~ /\^/
header __MN_PUNC07 Subject =~ /&/
header __MN_PUNC08 Subject =~ /\*/
# header __MN_PUNC09 Subject =~ /\(|\)/
header __MN_PUNC10 Subject =~ /\?/
header __MN_PUNC11 Subject =~ /\+/
header __MN_PUNC12 Subject =~ /=/
header __MN_PUNC13 Subject =~ /\{|\}/
# header __MN_PUNC14 Subject =~ /\[|\]/
header __MN_PUNC15 Subject =~ /\|/
header __MN_PUNC16 Subject =~ /\"/
header __MN_PUNC17 Subject =~ /\;/
header __MN_PUNC18 Subject =~ /\:/
header __MN_PUNC19 Subject =~ /\//
header __MN_PUNC20 Subject =~ /_/
meta MN_PUNCTUATION (__MN_PUNC01 + __MN_PUNC02 + __MN_PUNC03 +
__MN_PUNC04 + __MN_PUNC05 + __MN_PUNC06 + __MN_PUNC07 + __MN_PUNC08 +
__MN_PUNC10 + __MN_PUNC11 + __MN_PUNC12 + __MN_PUNC13 + __MN_PUNC15 +
__MN_PUNC16 + __MN_PUNC17 + __MN_PUNC18 + __MN_PUNC19 + __MN_PUNC20 >= 3)
score MN_PUNCTUATION 0.1
#
# Now, let's go hunt with this:
meta MN_PUNCS1 (MN_PUNCTUATION && (FREEWEB || HAS_SHORT_URL ||
MN_TUMBLR))
score MN_PUNCS1 6
describe MN_PUNCS1 Garbled subject with free website or blogsite, SHORT_URL
or tumblr link
meta MN_PUNCS2 (MN_PUNCTUATION && FREEMAIL)
score MN_PUNCS2 3
describe MN_PUNCS2 Garbled subject from a free mail address
--
View this message in context:
http://old.nabble.com/Chickenpoxed-subjects-tp32644509p32672891.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
