RE: [Declude.JunkMail] Help with Regex

2008-10-29 Thread Todd Richards
Good point, Matt.  Thanks!

Todd


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Wednesday, October 29, 2008 1:07 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Help with Regex

Todd,

There are 600,426,974,379,824,381,952 ways to spell "Viagra" 
(http://www.americanscientist.org/issues/pub/how-many-ways-can-you-spell-v1g
ra/3) 
and likewise a similar number of ways to obfuscate other words with 6 
letters.

It is a better to target other aspects of the message and even the 
obfuscation techniques themselves than to attempt to go after the actual 
text.

Matt



Todd Richards wrote:
> Hi Everyone -
>
> I'm seeing this come through a lot - "CH!l.D P.ORN and P!rate S0ftware".
So
> far, the spam filters are catching it ok based on all of the other filters
> there.  However, some of them are barely being caught and I'd like to make
> sure they don't make it through.  I threw a basic "CONTAINS" filter in for
> an exact match, but I can already see them doing different things to make
it
> through.
>
> Any suggestions on a regular expression?
>
> Todd
>
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>
>   



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Help with Regex

2008-10-29 Thread Matt

Todd,

There are 600,426,974,379,824,381,952 ways to spell "Viagra" 
(http://www.americanscientist.org/issues/pub/how-many-ways-can-you-spell-v1gra/3) 
and likewise a similar number of ways to obfuscate other words with 6 
letters.


It is a better to target other aspects of the message and even the 
obfuscation techniques themselves than to attempt to go after the actual 
text.


Matt



Todd Richards wrote:

Hi Everyone -

I'm seeing this come through a lot - "CH!l.D P.ORN and P!rate S0ftware".  So
far, the spam filters are catching it ok based on all of the other filters
there.  However, some of them are barely being caught and I'd like to make
sure they don't make it through.  I threw a basic "CONTAINS" filter in for
an exact match, but I can already see them doing different things to make it
through.

Any suggestions on a regular expression?

Todd




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.