Reginaldo O. Andrade wrote:
> Hi, list!
>  
> I received today new variants of those annoying spams with "drugs"
> (described below) that SpamAssassin 3.0.3 with default cf files didn't
> block them. Someone knows what to do?
>  
> VlÁGRÀ
> CÎÀLlS
>  
> Thanks in advance!
>  
> Reginaldo O. Andrade
> Network Administrator

This should patch the problem, apparently /i doesn't deal with capital vs lower
case in extended characters Note the addition of \xC0-\xC6 for the a's and the
addition of \0xcc-\0xcf for the i':



body __DRUGS_ERECTILE1
/(?:\b|\s)[_\W]{0,3}(?:\\\/|V)[_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,[EMAIL
 PROTECTED],3}[xyz]?[gj][_\W]{0
,3}rr?[_\W]{0,[EMAIL PROTECTED],3}x?[_\W]{0,3}(?:\b|\s)/i


body __DRUGS_ERECTILE3
/(?:\A|[\s\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f])[_\W]{0,3}C[_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,[EMAIL
 PROTECTED]
[_\W]{0,3}l?[l!|1][_\W]{0,3}[ij1!|l\xCC-\xCF\xEC-\xEF][_\W]{0,3}s[_\W]{0,3}(?:\b|\s)/i

Reply via email to