Re: Question about a spam assassin rule

2010-11-20 Thread John Hardin
On Sat, 20 Nov 2010, David B Funk wrote: The idea was that most all legit 3 character HTML tags such as 'div' contained at least one of those letters ([dpry]) in them. So a purported tag that had none of them was not legit and thus probably bogus spammer spoor. With the evolution of HTML (xml,

Question about a spam assassin rule

2010-11-19 Thread jmargi
in context: http://old.nabble.com/Question-about-a-spam-assassin-rule-tp30260257p30260257.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Question about a spam assassin rule

2010-11-19 Thread Bowie Bailey
rawbody FR_3TAG_3TAG m'[abcefghijklmnoqstuvwxz]{3}/[abcefghijklmnoqstuvwxz]{3}'i It looks for an html tag containing exactly three characters followed by a closing tag which also contains exactly three characters. -- Bowie On 11/19/2010 2:51 PM, jmargi wrote: Does anyone have a

Re: Question about a spam assassin rule

2010-11-19 Thread Daniel McDonald
On 11/19/10 2:51 PM, Bowie Bailey bowie_bai...@buc.com wrote: rawbody FR_3TAG_3TAG m'[abcefghijklmnoqstuvwxz]{3}/[abcefghijklmnoqstuvwxz]{3}'i It looks for an html tag containing exactly three characters followed by a closing tag which also contains exactly three characters. But no

Re: Question about a spam assassin rule

2010-11-19 Thread David B Funk
On Fri, 19 Nov 2010, Daniel McDonald wrote: On 11/19/10 2:51 PM, Bowie Bailey bowie_bai...@buc.com wrote: rawbody FR_3TAG_3TAG m'[abcefghijklmnoqstuvwxz]{3}/[abcefghijklmnoqstuvwxz]{3}'i It looks for an html tag containing exactly three characters followed by a closing tag which also