Try this ...
(?i:\b(?!dick?)(m(\W?|_){0,3}e(\W?|_){0,3}g(\W?|_){0,[EMAIL
PROTECTED])?(\W?|_){0,3}d(\
W?|_){0,3}[|li1í!](\W?|_){0,3}[ck]{1,2}\b)
Will match on obfuscated dick (ie. D!ck) but NOT dick, can include mega
obfuscated.
David
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John
Olden
Sent: Tuesday, August 21, 2007 1:40 PM
To: [email protected]
Subject: [Declude.JunkMail] ED Spam
I'm still a little green on the regular expressions. I added the following
to my filters and it has been doing good.
BODY 100 PCRE
m[\s_\.-]?(=2e)?e[\s_.-]?(=2e)?g[\s_.-]?(=2e)?a[\s_.-]?(=2e)?d[\s_.-]?(=2e)?
i[\s_.-]?(=2e)?k
but it doesn't catch
Me - ga - Di k
Any suggestions on a better expression?
TIA
--
John Olden - Technology Manager
Champaign Park District
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John E.
Richardson
Sent: Friday, November 30, 2007 1:39 PM
To: [email protected]
Subject: [Declude.JunkMail] ED Spam Expression
Greetings,
I was wondering if anyone could send me David Barker's message to the list
from 08/21/07 regarding ED Spam. I found it in the archives, but it's got a
nice [EMAIL PROTECTED] stuck right in the middle of the expression that he
provided.
http://www.mail-archive.com/[email protected]/msg31989.html
(?i:\b(?!dick?)(m(\W?|_){0,3}e(\W?|_){0,3}g(\W?|_){0,[EMAIL
PROTECTED])?(\W?|_){0,3}d(\W?|_){0,3}[|li1í!](\W?|_){0,3}[ck]{1,2}\b)
Thanks in advance,
John Richardson
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
