Yes I know :( has been pointed out to me so has been revised :-

header          __LOCAL_DIG1            subject =~ /^\d[0-9]{4,6}$/
body            __LOCAL_DIG2            /^([a-f|0-9]{8})$/i
describe        LOCAL_DIG1              Daft Number Scam
meta            LOCAL_DIG1              __LOCAL_DIG1 && __LOCAL_DIG2
score           LOCAL_DIG1              3

Regards,

--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854  36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]

----- Original Message -----
From: "Henrik Krohns" <[EMAIL PROTECTED]>
To: users@spamassassin.apache.org
Sent: Tuesday, August 7, 2007 3:34:49 PM (GMT) Europe/London
Subject: Re: Number spam (paranoid guess)


On Tue, Aug 07, 2007 at 02:52:25PM +0100, UxBoD wrote:
> This appears to work okay :-
> 
> header          __LOCAL_PROBE1          subject =~ /[0-9]{4,6}/i
> body            __LOCAL_PROBE2          /([a-z|0-9]{8})/i
> describe        LOCAL_PROBE1            Daft Number Probe
> meta            LOCAL_PROBE1            (__LOCAL_PROBE1 + __LOCAL_PROBE2 > 1)
> score           LOCAL_PROBE1            3

Looks like nice FP generator for busy sites. PROBE2 is certain to hit almost
anything and then just wait for a few digits in subject.. :)


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Reply via email to