Re: The stock spammer with the ||'s

2005-04-15 Thread Gene Heskett
On Thursday 14 April 2005 20:30, wolfgang wrote: >In an older episode (Friday 15 April 2005 02:02), > [EMAIL PROTECTED] > >wrote: >> \b means "word-ish character on one side, non-wordish character on >> the > >other" > >good explanation to help me understand my misconception, thanks. > >> | is not

Re: The stock spammer with the ||'s

2005-04-15 Thread wolfgang
In an older episode (Friday 15 April 2005 02:02), [EMAIL PROTECTED] wrote: > \b means "word-ish character on one side, non-wordish character on the other" good explanation to help me understand my misconception, thanks. > | is not a word-ish character i was aware of that, but tried to "consid

RE: The stock spammer with the ||'s

2005-04-15 Thread Matthew.van.Eerde
wolfgang wrote: > i have been trying to catch those for a while, partly successfully. > thanks for the chickenpox hint, that looks like a good add-on. > > while fiddling with my rules, i noticed something strange: > rawbody SOMERULE /\bmai\|\b/ > will not work > rawbody SOMERULE /\bmai\|/ > will.

Re: The stock spammer with the ||'s

2005-04-14 Thread wolfgang
i have been trying to catch those for a while, partly successfully. thanks for the chickenpox hint, that looks like a good add-on. while fiddling with my rules, i noticed something strange: rawbody SOMERULE /\bmai\|\b/ will not work rawbody SOMERULE /\bmai\|/ will. same with rules that start with

RE: The stock spammer with the ||'s

2005-04-14 Thread Gray, Richard
> 2.7 SORTED_RECIPS Recipient list is sorted by address How is this done? We currently use 2.64 and I haven't seen this particular rule before. Does it require 3.0? R --- This email from dns has been validated by dnsMSS Managed Email Sec

The stock spammer with the ||'s

2005-04-14 Thread Loren Wilton
After reading the long thread, I just happened to look in the spam bucket, and lo! there was one from him. And looking at it, I see why I hadn't noticed them before - I don't normally look at spam scoring this high. Chickenpox is your friend. :-) Loren Content analysis details: (29.0