Reginaldo O. Andrade wrote: > Hi, list! > > I received today new variants of those annoying spams with "drugs" > (described below) that SpamAssassin 3.0.3 with default cf files didn't > block them. Someone knows what to do? > > VlÁGRÀ > CÎÀLlS > > Thanks in advance! > > Reginaldo O. Andrade > Network Administrator
This should patch the problem, apparently /i doesn't deal with capital vs lower case in extended characters Note the addition of \xC0-\xC6 for the a's and the addition of \0xcc-\0xcf for the i': body __DRUGS_ERECTILE1 /(?:\b|\s)[_\W]{0,3}(?:\\\/|V)[_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,[EMAIL PROTECTED],3}[xyz]?[gj][_\W]{0 ,3}rr?[_\W]{0,[EMAIL PROTECTED],3}x?[_\W]{0,3}(?:\b|\s)/i body __DRUGS_ERECTILE3 /(?:\A|[\s\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f])[_\W]{0,3}C[_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,[EMAIL PROTECTED] [_\W]{0,3}l?[l!|1][_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,3}s[_\W]{0,3}(?:\b|\s)/i