Re: Detect Emoticons in Subject

2021-05-21 Thread RW
On Thu, 20 May 2021 19:39:06 +0100 RW wrote: > > /\xF0\x9F(?:\x98[\x80-\xBF]|\x99[\x80-\x8F])|xF0\x9F(?:[\xA4-\xA6][\x80-\xBF]|\xA7[\x80-\xBF])|\xE2\x98[\xB9-\xBB]/ This includes the block mentioned by Bill Cole and and is simplified a bit /\xF0\x9F[\x98-\x99\xA4-\xA7\x8C-\x97][\x80-\x8F]|\xE

Re: Detect Emoticons in Subject

2021-05-21 Thread Henrik K
On Fri, May 21, 2021 at 09:53:36AM +0200, Tom Hendrikx wrote: > > Can someone explain why SA cannot support this type of syntax, or what would > be needed to get it supported? IMHO it makes it a lot easier for end-users > to understand a rule, and for rule developers to write or even contribute > n

Re: Detect Emoticons in Subject

2021-05-21 Thread Tom Hendrikx
On 20-05-2021 18:19, RW wrote: On Thu, 20 May 2021 11:42:59 -0400 Clive Jacques wrote: Hi, I've been using SA a long time. Lately, I'm getting more and more spam with emoticons in the subject line. I'd say about 90% of my emails with emoticons in the subject are spam. I'd like to create a l

Re: Detect Emoticons in Subject: CHAOS

2021-05-20 Thread Benny Pedersen
On 2021-05-20 22:33, Clive Jacques wrote: Here is a good example of such an email (attached, stripped of identifying info). This attachment is suspicious because its type doesn't match the type declared in the message. If you do not trust the sender, you shouldn't open it in the browser becau

Re: Detect Emoticons in Subject: CHAOS

2021-05-20 Thread RW
On Thu, 20 May 2021 15:35:21 -0400 Jared Hall wrote: > Clive Jacques wrote: > > # Local Rule for Emoticons in subject > > subject        EMOTICON_IN_SUBJECT      Subject =~ /\p{Emoticons}/ > > The following regex will detect a good amount of Emojis: > > |/[\u{1f300}-\u{1f5ff}\u{1f900}-\u{1f9ff

Re: Detect Emoticons in Subject: CHAOS

2021-05-20 Thread Jared Hall
Clive Jacques wrote: Hi, I've been using SA a long time.  Lately, I'm getting more and more spam with emoticons in the subject line.  I'd say about 90% of my emails with emoticons in the subject are spam.  I'd like to create a local rule which scores email with emoticons in the subject.  I sa

Re: Detect Emoticons in Subject

2021-05-20 Thread Clive Jacques
That's fine - I'm not saying all email containing emojis in the subject (or elsewhere) *is *spam - just that it's uncommon and right now, about 90% of the time it is *for me*. I just want to score it as part of the greater constellation of factors (just like DKIM, SPF etc.). On Thu, May 20, 2021

Re: Detect Emoticons in Subject

2021-05-20 Thread Bill Cole
On 2021-05-20 at 13:44:43 UTC-0400 (Thu, 20 May 2021 18:44:43 +0100) RW is rumored to have said: On Thu, 20 May 2021 18:30:03 +0100 RW wrote: Try this: header EMOTICON_IN_SUBJECT Subject =~ /\xF0\x9F(?:\x98[\x80-\xFF]|\x99[\x00-x8F])/ Actually that's only the original block, but it pr

Re: Detect Emoticons in Subject

2021-05-20 Thread RW
On Thu, 20 May 2021 19:26:30 +0100 RW wrote: > On Thu, 20 May 2021 18:44:43 +0100 > RW wrote: > > > On Thu, 20 May 2021 18:30:03 +0100 > > RW wrote: > > > > > > > Try this: > > > > > > > > > header EMOTICON_IN_SUBJECT Subject =~ > > > /\xF0\x9F(?:\x98[\x80-\xFF]|\x99[\x00-x8F])/ > > >

Re: Detect Emoticons in Subject

2021-05-20 Thread RW
On Thu, 20 May 2021 18:44:43 +0100 RW wrote: > On Thu, 20 May 2021 18:30:03 +0100 > RW wrote: > > > > Try this: > > > > > > header EMOTICON_IN_SUBJECT Subject =~ > > /\xF0\x9F(?:\x98[\x80-\xFF]|\x99[\x00-x8F])/ > > > > Actually that's only the original block, but it probably works most o

Re: Detect Emoticons in Subject

2021-05-20 Thread RW
On Thu, 20 May 2021 18:30:03 +0100 RW wrote: > Try this: > > > header EMOTICON_IN_SUBJECT Subject =~ > /\xF0\x9F(?:\x98[\x80-\xFF]|\x99[\x00-x8F])/ > Actually that's only the original block, but it probably works most of the time

Re: Detect Emoticons in Subject

2021-05-20 Thread RW
On Thu, 20 May 2021 18:34:54 +0200 Bert Van de Poel wrote: > We've started getting lots of spam with emoji in the subject too the > past few weeks, so I've looked into this as well. As mentioned by RW, > you would need to create some kind of UTF8 regex header Subject rule. > As I'm not too excit

Re: Detect Emoticons in Subject

2021-05-20 Thread Martin Gregorie
On Thu, 2021-05-20 at 18:34 +0200, Bert Van de Poel wrote: > We've started getting lots of spam with emoji in the subject too the > past few weeks, so I've looked into this as well. As mentioned by RW, > you would need to create some kind of UTF8 regex header Subject rule. As > I'm not too excite

Re: Detect Emoticons in Subject

2021-05-20 Thread Bert Van de Poel
We've started getting lots of spam with emoji in the subject too the past few weeks, so I've looked into this as well. As mentioned by RW, you would need to create some kind of UTF8 regex header Subject rule. As I'm not too excited about writing such a regex, it's way at the bottom of my todo l

Re: Detect Emoticons in Subject

2021-05-20 Thread RW
On Thu, 20 May 2021 11:42:59 -0400 Clive Jacques wrote: > Hi, > > I've been using SA a long time. Lately, I'm getting more and more > spam with emoticons in the subject line. I'd say about 90% of my > emails with emoticons in the subject are spam. I'd like to create a > local rule which scores

Detect Emoticons in Subject

2021-05-20 Thread Clive Jacques
Hi, I've been using SA a long time. Lately, I'm getting more and more spam with emoticons in the subject line. I'd say about 90% of my emails with emoticons in the subject are spam. I'd like to create a local rule which scores email with emoticons in the subject. I saw a previous discussion on