> > > http://www.wot.no-ip.com/cgi-bin/detoken.pl
> > >
> > > Most of the gibberish I see is encoded tracking information. I plugged
> > > in my domain name to the little script thingy, saved the .cf file, and
> > > it catches 'em like crazy.
> >
> > I've added a link for this to the front page
On Wed, Dec 17, 2003 at 10:05:41AM -0500, AltGrendel wrote:
> On Thu, 2003-12-11 at 11:17, Tom Meunier wrote:
> > http://www.wot.no-ip.com/cgi-bin/detoken.pl
> >
> > Most of the gibberish I see is encoded tracking information. I plugged
> > in my domain name to the little script thingy, saved the
On Thu, 2003-12-11 at 11:17, Tom Meunier wrote:
> http://www.wot.no-ip.com/cgi-bin/detoken.pl
>
> Most of the gibberish I see is encoded tracking information. I plugged
> in my domain name to the little script thingy, saved the .cf file, and
> it catches 'em like crazy.
>
I've added a link for
Archive of this:
http://marc.theaimsgroup.com/?t=10613675441&r=1&w=2
Analyze letter frequency for normal words, and detect non-normal letter
frequency of gibberish.
--luke
> I have noticed that many SPAM emails, end with seversl lines of gibberish,
> such as:
>
> lvwpdfobv qkviylqr qlm
generate the rules for any user in my domain(s)... what am I doing
wrong?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Tom
Meunier
Sent: Thursday, December 11, 2003 8:17 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Detecting strings of
FYI: Solved.
> This is the only rule that failes for me:
>
> rawbody W_B64_HALL =~ /Z3VlbnRoZXJAcnVkZXJzcG9ydC5kZQ/
> describe W_B64_H Listwashing token found in head - Base64
> score W_B64_H 1.0
I just have been informed that this little bug has been fixed. The rule
should read:
hea
[ Cc: to the detoken rules maintainer ]
> However, seems there are issues with the full-address detoken rules and
> SA 2.61 (using Perl v5.8.0). Any ideas?
>
> # spamassassin --lint
> Failed to compile body SpamAssassin tests, skipping:
> (Bareword "ALL" not allowed while "strict subs" in
Bill Landry said:
> Hmmm, Jennifer was hosting her excellent rules at
> http://spamhammers.nxtek.net, but the site appears to be inaccessible
> right
> now. You can also fine them at
Jennifer moved her rulesets to:
http://www.emtinc.net/spamhammers.htm
--
Chris Thielen
Easily generate SpamAss
[ Cc: to the detoken rules maintainer ]
On Thu, 2003-12-11 at 17:17, Tom Meunier wrote:
> http://www.wot.no-ip.com/cgi-bin/detoken.pl
>
> Most of the gibberish I see is encoded tracking information. I plugged
> in my domain name to the little script thingy, saved the .cf file, and
> it catches '
Hmmm, Jennifer was hosting her excellent rules at
http://spamhammers.nxtek.net, but the site appears to be inaccessible right
now. You can also fine them at
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm, listed as:
popcorn.cf, backhair.cf, and weeds.cf. There may be a combined set
http://www.wot.no-ip.com/cgi-bin/detoken.pl
Most of the gibberish I see is encoded tracking information. I plugged
in my domain name to the little script thingy, saved the .cf file, and
it catches 'em like crazy.
-tom
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROT
11 matches
Mail list logo
