On Wed, Mar 17, 2004 at 04:04:58 -0600, David B Funk wrote: > Would somebody please mass-check the following rule set > and let me know if there's any collateral damage? > I whiped them up to deal with a new flavor of spam that I'm > seeing more of these days. > > > rawbody L_FAKE_HREF /\w\whref=http:/i > describe L_FAKE_HREF Faked href to hide spammer URLs > score L_FAKE_HREF 1.0 >
i am probably just seeing things and being stupid, but what is
invalid about the above href?
> full L_SPLITFONT1 /<font color=\n\n"?\#[a-f]\w[a-f]\w[a-f]\w"?>/i
> describe L_SPLITFONT1 HTML bright font color tag split by blank lines
> score L_SPLITFONT1 1.0
>
> meta L_HTML_OBFU ( L_SPLITFONT1 && L_FAKE_HREF && HTML_MESSAGE )
> describe L_HTML_OBFU HTML spam with obfuscated bright colored font
> score L_HTML_OBFU 5.0
>
> The scores were semi-arbitrarily chosen so any suggestions on
> improving those would also be welcome.
>
> --
> Dave Funk University of Iowa
> <dbfunk (at) engineering.uiowa.edu> College of Engineering
> 319/335-5751 FAX: 319/384-0549 1256 Seamans Center
> Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
> #include <std_disclaimer.h>
> Better is not better, 'standard' is better. B{
--
Cats land on their feet.
Toast lands jellyside down.
A cat glued to some jelly toast will hover in quantum indecision
perl -e'$_=q#: 13_2: 12/o{>: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: \
12m m::#;y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'
Yes, of course it's the right cabl [le0: NO CARRIER]
pgp0AIWYgCHX3.pgp
Description: PGP signature
