I must put a disclaimer that this is possibly not the most efficient regex in
the world either - though I'm not sure what else could be done to refine it so
it still matches in the way we want. 250 character limit should help though?
Paul
On 06/08/14 18:32, Paul Stead wrote:
06/08/14 16:28, Quanah Gibson-Mount wrote:
Would you be willing to share your full finalized ruleset? This spam is really
obnoxious.
Sure...
A little adjustment as I noticed the brackets around the first number match was
wrong:
header __LOC_DIGITS_FROM From:name =~ /\.\d{7,8}$/
body __LOC_DIGITS_CONFUSER / (\d{7,8}) .{1,250} ([0-9a-f]{32})
.{1,250}[\g1|\g2] .{1,250}[\g1|\g2]/
Something like...
meta LOC_DIGITS_SPAM ( __LOC_DIGITS_FROM && __LOC_DIGITS_CONFUSER)
score LOC_DIGITS_SPAM 0.001
should work
--
Paul Stead
Systems Engineer
Zen Internet
--
Paul Stead
Systems Engineer
Zen Internet
