On Mon, 2004-02-23 at 13:45, Andy Spiegl wrote:
> Hi John,
>
> > describe CLUMSY_SPAMMER_01 Spammer botched his email obfuscation
> > rawbody CLUMSY_SPAMMER_01 /<!--\s*%RANDOM_WORD\s*-->/
> > score CLUMSY_SPAMMER_01 1.0
>
> Is RANDOM_WORD part of the standard SA-distribution? (v2.63)
> I can't find it anywhere in the perl code...
Nope, that's apparently part of an automated spam tool. I noticed in the
raw body of a few spams and decided it'd be a good trigger. Apparently
the spammers in question didn't run their spam tool correctly, and it
didn't do all the keyword substitutions it was supposed to.
I've also seen something similar on subject lines. I don't remember what
the precise token was, though.
> [OT]
> > 7 days until ICQ Corp goes away - have you installed Jabber yet?
> Oops, what?
"ICQ Corporate" (a.k.a. "ICQ Groupware") is a private-network
("corporate") ICQ server/client package that never made it out of beta
before being orphaned. It doesn't use the standard (Internet) ICQ
protocols so *only* the proprietary ICQ Corporate client will talk to
it. And the client isn't available on Linux. It's a dead end, so we're
replacing it with a living FOSS equivalent.
Gosh, I wish there was a way in Evolution to pick .sig files based on
the To: address. Then I wouldn't be bothering you guys with that purely
internal countdown... :)
--
John Hardin KA7OHZ
Internal Systems Administrator/Guru voice: (425) 672-1304
Apropos Retail Management Systems, Inc. fax: (425) 672-0192
-----------------------------------------------------------------------
Failure to plan ahead on someone else's part does not constitute an
emergency on my part.
- David W. Barts in a.s.r
-----------------------------------------------------------------------
7 days until ICQ Corp goes away - have you installed Jabber yet?
