On 4/11/20 9:06 PM, John Hardin wrote: > On Thu, 9 Apr 2020, John Hardin wrote: > >> On Thu, 9 Apr 2020, RW wrote: >> >>> On Thu, 9 Apr 2020 09:59:16 +0200 >>> Giovanni Bechis wrote: >>> >>>> Hi, >>>> I am trying to let __COPY_PASTE_EN match this message: >>>> https://pastebin.com/QfungfGY >>>> >>>> The message has the relevant text obfuscated, I tried with >>>> replace_tags with the following rule but it doesn't seems to work, >>>> any hints ? ifplugin Mail::SpamAssassin::Plugin::ReplaceTags body >>>> __COPY_PASTE_EN /<C><O><P><Y> (<A><N><D>|\+|\&) <P><A><S><T><E>/i >>>> replace_rules __COPY_PASTE_EN else >>>> body __COPY_PASTE_EN /Copy (and|\+|\&) paste/i >>>> endif >>> >>> It's because the letter tags have incomplete coverage of ISO 8859-7. >> >> Yeah, I've been working on expanding the coverage but it's been piecemeal. >> >> I'll try to add the missing ones soon, unless somebody else tackles it. > > OK, ISO-8859-7 coverage added. How now? > the rule doesn't trigger yet, fwiw, "copy and paste" text is written as "co=F1y =E1nd =F1as=F4e" in text/plain email message, I do not know what could be added to replace_tags to properly match all letters.
Thanks and cheers Giovanni
