RE: [Declude.JunkMail] Help with Regex
Good point, Matt. Thanks! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, October 29, 2008 1:07 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Help with Regex Todd, There are 600,426,974,379,824,381,952 ways to spell "Viagra" (http://www.americanscientist.org/issues/pub/how-many-ways-can-you-spell-v1g ra/3) and likewise a similar number of ways to obfuscate other words with 6 letters. It is a better to target other aspects of the message and even the obfuscation techniques themselves than to attempt to go after the actual text. Matt Todd Richards wrote: > Hi Everyone - > > I'm seeing this come through a lot - "CH!l.D P.ORN and P!rate S0ftware". So > far, the spam filters are catching it ok based on all of the other filters > there. However, some of them are barely being caught and I'd like to make > sure they don't make it through. I threw a basic "CONTAINS" filter in for > an exact match, but I can already see them doing different things to make it > through. > > Any suggestions on a regular expression? > > Todd > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Help with Regex
Todd, There are 600,426,974,379,824,381,952 ways to spell "Viagra" (http://www.americanscientist.org/issues/pub/how-many-ways-can-you-spell-v1gra/3) and likewise a similar number of ways to obfuscate other words with 6 letters. It is a better to target other aspects of the message and even the obfuscation techniques themselves than to attempt to go after the actual text. Matt Todd Richards wrote: Hi Everyone - I'm seeing this come through a lot - "CH!l.D P.ORN and P!rate S0ftware". So far, the spam filters are catching it ok based on all of the other filters there. However, some of them are barely being caught and I'd like to make sure they don't make it through. I threw a basic "CONTAINS" filter in for an exact match, but I can already see them doing different things to make it through. Any suggestions on a regular expression? Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help with Regex
Hi Everyone - I'm seeing this come through a lot - "CH!l.D P.ORN and P!rate S0ftware". So far, the spam filters are catching it ok based on all of the other filters there. However, some of them are barely being caught and I'd like to make sure they don't make it through. I threw a basic "CONTAINS" filter in for an exact match, but I can already see them doing different things to make it through. Any suggestions on a regular expression? Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
