On Sun, 8 Feb 2004, Matthias Fuhrmann wrote: > another anyoing spammer:
They're all annoying. > <html><body> > <center><!--sriwQlj8pV75--><a href="http://www.sortffr.com";><img > src="http://www.rockedce.com/v9.gif"; border=0></a></center> > <body></html> > > 3 lines. > didnt got hit hard enough yet, only 6.5 points (requiered 5). > anyone seen this yet and got more examples, or might write a regex ? This is a _very_ common ratware indicator. This rule will bag it: rawbody LOCAL_CENTER_COM /<center><!--/ describe LOCAL_CENTER_COM Message has a center followed by a comment score LOCAL_CENTER_COM 2.5 In one corpus, that rule hit a couple of thousand spams and not a single ham. +------------------------------------------------+---------------------+ | Carl Richard Friend (UNIX Sysadmin) | West Boylston | | Minicomputer Collector / Enthusiast | Massachusetts, USA | | mailto:[EMAIL PROTECTED] +---------------------+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | +------------------------------------------------+---------------------+
![http://www.rockedce.com/v9.gif"](http://www.rockedce.com/v9.gif"){kind=link}