RE: [SAtalk] Exessive HTML Code

2003-10-30 Thread Larry Gilson
Hi Mark, -Original Message- From: Mark Ritchie [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Exessive HTML Code Do you really think it would be a problem if we found more than 3 instances of i/i in each

[SAtalk] Exessive HTML Code

2003-10-29 Thread Mark Ritchie
I've added the popcorn, blackhair, and weeds rules a while back, but I've noticed that I'm still getting quite a few spams messages per day. It always seems to be the most offensive porn and such that makes it through. Here is an example of the source that get's through HTMLhtmlbody

Re: [SAtalk] Exessive HTML Code

2003-10-29 Thread Keith C. Ivey
Mark Ritchie [EMAIL PROTECTED] wrote: Now, as you can see the trick here to fool spamassassin is the i and b tags. I don't think that's what's fooling SA. SA strips all that stuff out before looking for phrases. The problem is the lack of phrases to trigger on. Would it be possible to

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Larry Gilson
] Subject: [SAtalk] Exessive HTML Code I've added the popcorn, blackhair, and weeds rules a while back, but I've noticed that I'm still getting quite a few spams messages per day. It always seems to be the most offensive porn and such that makes it through. Here is an example of the source that get's

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Mark Ritchie
[mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 9:35 AM To: Mark Ritchie; [EMAIL PROTECTED] Subject: RE: [SAtalk] Exessive HTML Code Yes, this would be possible. describe MY_RBDY_EXSV_TAGMY: Excessive HTML Tags rawbody MY_RBDY_EXSV_TAG/[bi]\/[bi]/i scoreMY_RBDY_EXSV_TAG

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Scott Sprunger
a single test in 20_head_tests.cf called TO_ADDRESS_EQ_REAL that uses backreferences in this way, so I'm presuming it works. -- Scott -Original Message- From: Mark Ritchie [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 8:14 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Exessive HTML

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Yackley, Matt
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Ritchie Sent: Wednesday, October 29, 2003 7:14 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Exessive HTML Code I've added the popcorn, blackhair, and weeds rules a while back, but I've

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Bill
Do you really think it would be a problem if we found more than 3 instances of i/i in each email to mark it as spam? Maybe I could just score it lower per instance, say .2 There were 58 instances of i/i in this email and 63 instances of b/b. A test that counted .1 per instance in a

Re: [0.6] [SAtalk] Exessive HTML Code

2003-10-29 Thread Charles Gregory
On Wed, 29 Oct 2003, Mark Ritchie wrote: Now, as you can see the trick here to fool spamassassin is the i and b tags. Would it be possible to make a rule or adjust the rules so the i/i scores high? There is nothing inbetween and I'd have to say anyone sending messages like this is obviously

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Jennifer Wheeler
. Jennifer -Original Message- From: Mark Ritchie [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 8:14 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Exessive HTML Code I've added the popcorn, blackhair, and weeds rules a while back, but I've noticed that I'm still getting quite

RE: [0.6] [SAtalk] Exessive HTML Code

2003-10-29 Thread Chris Santerre
On Wed, 29 Oct 2003, Mark Ritchie wrote: Now, as you can see the trick here to fool spamassassin is the i and b tags. Would it be possible to make a rule or adjust the rules so the i/i scores high? There is nothing inbetween and I'd have to say anyone sending messages like this