On Sun, 8 Feb 2004, Carl R. Friend wrote: > On Sun, 8 Feb 2004, Matthias Fuhrmann wrote: > > > another anyoing spammer: > > They're all annoying.
yes :) > > 3 lines. > > didnt got hit hard enough yet, only 6.5 points (requiered 5). > > anyone seen this yet and got more examples, or might write a regex ? > > This is a _very_ common ratware indicator. This rule will bag it: > > rawbody LOCAL_CENTER_COM /<center><!--/ > describe LOCAL_CENTER_COM Message has a center followed by a comment > score LOCAL_CENTER_COM 2.5 > > In one corpus, that rule hit a couple of thousand spams and not a > single ham. thnx. i'll give it a try. inspired by your regex i made a more safer additional version which i gave even more points: rawbody LOCAL_CENTER_COM_2 /<center><!--[ \S]*.gif/ describe LOCAL_CENTER_COM_2 Message has a center followed by a comment score LOCAL_CENTER_COM_2 10 regards, Matthias
