> -----Original Message----- > From: Andy Blanchard [mailto:[EMAIL PROTECTED] > Sent: Tuesday, February 03, 2004 1:22 PM > To: [EMAIL PROTECTED] > Subject: Re: Mr Wiggly has changed > > > > I've just received a new version of the same old message > which was missed > > by the Mr Wiggly rules. > > > > Message source here: http://www.mailsecurity.net.au/tmp/mrwiggly.txt > > Persistant little swine this one... The following works > nicely for me and > has generated no false positives yet (hence the high score), YMMV: > > # Look for URIs linking to a .GIF or .JPG with one or two letters > # then one or two numbers as the name > uri AMB_IMAGE_CONTENT /\/[a-z][a-z]?[0-9][0-9]?\.(gif|jpg)/i > describe AMB_IMAGE_CONTENT Contains URI linking to numbered > GIF or JPG > score AMB_IMAGE_CONTENT 3.0 > > Andy
I have exaclty the same, but I've seen some FPs on it, and scored it below 1.0. Be carefull :) --Chris
