On Tue, 5 Aug 2014, Andy Balholm wrote:


On Aug 5, 2014, at 10:48 AM, John Hardin <jhar...@impsec.org> wrote:

Unfortunately the masscheck pages' links to SVN got broken in the recent 
rebuild.

That rule lives here:

https://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?view=log

It should be part of the current base rules update.

I don't really understand that rule, but I tested the __HEXHASHWORD_S2EU regex 
against my /var/mail directory, and it has 67 matches, most of which don’t have 
much resemblance to what I’m looking to match:

It can hit on embedded phone numbers, which are, strictly speaking, valid hexadecimal strings...

Contact me by cell 6047919108 or email to set apt. Thank you
and give me a call at work 6047924667 and i will give you my visa info

I suspect it's hitting on all those dates as well, and needs some more tightening.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   "A well educated Electorate, being necessary to the liberty of a
    free State, the Right of the People to Keep and Read Books,
    shall not be infringed."
  ...means only registered voters can read books, and only those books
  obtained with State permission from State-controlled bookstores?
-----------------------------------------------------------------------
 Today: the 279th anniversary of John Peter Zenger's acquittal

Reply via email to