BODY dottywords /[a-z]\.[a-z].+[a-z]\.[a-z].+[a-z]\.[a-z].+[a-z]\.[a-z]/is
Probably not too efficient, and completely untested, but it should match messages with 4 or more d.ott.y w.or.ds
At 10:56 AM 5/24/2003 -0700, lindsay adams wrote:
I just got a piece of pr0n spam that had 90% of the words writing with a period after the first letter of every word.
especially all the obvious trigger words
here is how the string of words would have looked. in the email, they were all pr0n references
w.ord - t.erm - a.nother t.erm - s.ome w.ords t.hat w.ould o.ffend p.eople - a.cts t.that k.ids s.hould n.ot k.now a.bout
get the idea?
How do i write a rule that handles that?
sorry not a regex expert, and don't know how to write a rule that says:
" if there are more than x occurrences of words that look like '\w\.\w+' (i think that's right)
while i could just look for a simple regex that matches a word like that, it would also toss out an email with numbers in it
as $9.75
$123.52
$93.10
would all match.
Any help/suggestions, rules to put in user_prefs, appreciated.
Thanks!
Lindsay Adams ------ I left my sig on my netcom shell account back in 1988
------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
