> From: Wim Borghs > at my site the best header regex to catch spam these days are thdese 2: > > \d\s+(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s+\d\d\d\d\s+\d\d:\d\d(:\d\d)?\s+[+\-]\d\d[6-9]\d > hmmm.. where's the trick here ?
you expect spammers using strange timezone ? why should they be so stupid ? ie. this is correct >> for [email protected]; Thu, 25 Jan 2007 03:12:52 -0800 but this is spam >> for [email protected]; Thu, 25 Jan 2007 03:12:52 -0870 nah, i'm not following you. Can you pls explain your regex ? > >Received:\s+from\s+\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\s+\(HELO\s+\S+\)\s+by\s+(\S+)\s+with\s+esmtp\s+\(\S+\s\S+\)\s+id\s+\S{6}-\S{6}->[EMAIL > PROTECTED]; hmm.. whe're the magic ? i suppose in the 'for' part, but why ? ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
