On 10/21/18 4:38 PM, Henrik K wrote:
On Sun, Oct 21, 2018 at 04:28:58PM +0200, Axb wrote:
On 10/21/18 4:21 PM, Henrik K wrote:
On Sun, Oct 21, 2018 at 04:07:40PM +0200, Axb wrote:
On 10/21/18 1:25 PM, Jari Fredriksson wrote:
./btcabuse.pl >btcabuse.cf.tmp && mv -f btcabuse.cf.tmp btcabuse.cf

would be nice to have it write \b to the cf

as in
body BTC_16LU6SWU /16LU6SwUDdLsAy7XXHSMg7BRbA1kfDoBnZ/
body BTC_16LU6SWU /\b16LU6SwUDdLsAy7XXHSMg7BRbA1kfDoBnZ\b/

Pretty sure you can manage to add it in right place :-D

Didn't bother since FPs would be pretty much impossible and \b is simple to
circumvent with underscores ___16LU6SwUDdL....


was worried that without the boundary it could hit "rawbody" of malformed
ham

Well it's body and not rawbody..  even using that the amount of random bits
would be like winning 10 jackpots in a row..  :-) But sure, plugin could be
better checks.

I'm surprised__there isn't_more spam___like_this out_there to break__the
million \b's rules use..


15 min later

 cat  /var/log/maillog | grep BTC_ | wc -l
39

Reply via email to