I added an abstract for this text pattern to Message Sniffer today. We regularly create similar rules for other variations - these patterns are independent from the URI.
_M On Tuesday, April 25, 2006, 11:59:20 AM, Scott wrote: SF> SF> SF> I might suggest something to target the links of the emails, SF> like Sniffer or INVURIBL as a good attack vector. SF> SF> Combo that test with a CBL result, since these often come from CBL lists. SF> SF> SF> SF> Dealing with all of the combinations would result in a painfully long filter. SF> SF> SF> ----- Original Message ----- SF> SF> From: Michael Graveen SF> SF> To: [email protected] SF> SF> Sent: Tuesday, April 25, 2006 10:22 AM SF> SF> Subject: [Declude.JunkMail] How would you create a filter for this? SF> SF> Hello, SF> I have checked through the archives and I have not been able SF> to find anything on creating a filter to block something like V p SF> I t A p G i R h A g ( where every other letter is used to spell SF> a word). The capital letters stay the same from email to SF> email, but the lower case letters change. Is there a way to set SF> up a filter line to catch this? I am using Declude JunkMail Pro 2.0.6.16 SF> Thanks in advance, SF> Mike SF> --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
