Herbert Straub wrote:

I observed, that my uri test /imteresting\.com/i fails. I check this also with spamassassin -D rulesrun=255. The mail containig the following URI <a href=3d"http://www=2eimteresting=2ecom/at/1/view=2ehtml";>

I searched the spamassassin-talk Mail Archiv and found the Thread "Obfusticated URI?". See:
http://www.mail-archive.com/[email protected]/msg29815.html
I think this is the same problem, with the =2e. But i don't understand the statement "and is decoded correctly by spamassassing, before the URI rules.". Should i write


uri HS_BLOCK /imteresting=2[Ee]com\//i

which matches, instead of

uri HS_BLOCK /imteresting\.com\//i

If i read the mail with mozilla-mail or display the message file direct with mozilla browser, then the =2e seems to be convertet to "." for the whole file. I uploaded the message to my homepage:
http://members.aon.at/hstraub/linux/message


What are wrong?

Herbert






Reply via email to