This is the email that went through. Nothing about razor though?

Return-Path: <[EMAIL PROTECTED]>
Received: from medusa.tvwerk.de ([unix socket])
         by medusa2 (Cyrus v2.2.13-Debian-2.2.13-10.cb1.1) with LMTPA;
         Fri, 12 Sep 2008 14:33:23 +0200
X-Sieve: CMU Sieve 2.2
Received: from proxy.tvwerk.de (proxy1 [10.10.10.2])
        by medusa.tvwerk.de (Postfix) with ESMTP id 0B6D51BD7F23
        for <[EMAIL PROTECTED]>; Fri, 12 Sep 2008 14:33:23 +0200 (CEST)
Received: from localhost (unknown [10.10.10.66])
        by proxy.tvwerk.de (Postfix) with ESMTP id 0313F304012
        for <[EMAIL PROTECTED]>; Fri, 12 Sep 2008 14:33:23 +0200 (CEST)
X-Virus-Scanned: amavisd-new at animoto.intern
X-Spam-Flag: NO
X-Spam-Score: 4.427
X-Spam-Level: ****
X-Spam-Status: No, score=4.427 tagged_above=-999 required=5
        tests=[BAYES_50=0.001, HTML_MESSAGE=0.001, RCVD_FORGED_WROTE2=4.325,
        RDNS_NONE=0.1]
Received: from proxy.tvwerk.de ([10.10.10.2])
        by localhost (voodoo.animoto.intern [10.10.10.66]) (amavisd-new, port
10024)
        with ESMTP id ZBT1zGMIqj33 for <[EMAIL PROTECTED]>;
        Fri, 12 Sep 2008 14:33:04 +0200 (MEST)
Received: from furtmair.com (unknown [79.165.217.243])
        by proxy.tvwerk.de (Postfix) with SMTP id 04966304031
        for <[EMAIL PROTECTED]>; Fri, 12 Sep 2008 14:32:11 +0200 (CEST)
Received: from 212.203.9.120 (HELO mail3.servernation.nl)
     by tvwerk.de with esmtp ({nChar[8-12]} {nChar[4-6]})
     id 8secZp-Vw7spY-Ee
     for [EMAIL PROTECTED]; Fri, 12 Sep 2008 16:32:12 +0400
Message-ID: <[EMAIL PROTECTED]>
From: "Rowena Hyatt" <[EMAIL PROTECTED]>
To: "Cherry Zapata" <[EMAIL PROTECTED]>
Subject: i need you
Date: Fri, 12 Sep 2008 16:32:12 +0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_17862_4630_01C914F5.1BF90F20"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=_NextPart_17862_4630_01C914F5.1BF90F20
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

i am Nice Girl good looking girl who is looking to chat with you=2E=20
email me back at [EMAIL PROTECTED]

i will reply back with some really nice pics or skype realtime videos=2E
------=_NextPart_17862_4630_01C914F5.1BF90F20
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4=2E0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-=
1">
<META content=3D"MSHTML 6=2E00=2E2900=2E2180" name=3DGENERATOR>
</HEAD>
<BODY>i am Nice Girl good looking girl who is looking to chat with you=2E=
 <br>

email me back at  3D"mailto:[EMAIL PROTECTED]" [EMAIL PROTECTED]
ciallam=2Ecom 
<br><br>
i will reply back with some really nice pics or skype realtime videos=2E<=
/b></BODY></HTML>

------=_NextPart_17862_4630_01C914F5.1BF90F20--



Robert Schetterer wrote:
> 
> patrickbaer schrieb:
>> Hi all,
>> 
>> I'm looking for some regex to find a list of strings in the body,
>> independent where they are and so on. 
>> 
>> Example:
>> 
>> i am Nice Girl good looking girl who is looking to chat with you.
>> email me back at [EMAIL PROTECTED]
>> 
>> i will reply back with some really nice pics or skype realtime videos.
>> 
>> The most common phrases are: nice girl, good looking, chat with you, nice
>> pics, videos
>> 
>> So if at least three of them hit, the rule should match.
>> 
>> Sorry for bothering again.
> 
> on my side
> this nice girl stuff is mostly matched
> by pyzor, razor, dcc, ixhash, freemail plugins etc
> so phrase matches arent that much important
> there arent so much mails of such kind which bypass
> rbls and clamav-milter at smtp level
> 
> -- 
> Best Regards
> 
> MfG Robert Schetterer
> 
> Germany/Munich/Bavaria
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Searching-for-a-list-of-strings-tp19455236p19455515.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to