On Fri, 27 Feb 2004, jdow wrote:

> From: "Matthias Fuhrmann" <[EMAIL PROTECTED]>
> 
> > just add a i to the regex:
> >
> > body  TW_AJ  /[-<!\s]\w{0,10}aj[fqtvxz]\w{0,10}[->\s]/i
> 
> Matthias, if you do this mimed attachments will get tagged, too.

No, they won't.  Note the [-<!\s] and [->\s] in the regex.  Those are
characters guaranteed not to appear in an encoded attachment, so the
regex won't match them.

> IMAO one should filter spam with spam filters and filter pathogens
> with pathogen filters.

Agreed, but that has nothing to do with this at all.  Tripwire looks for
garbage fake HTML tags and other random non-words that have been sprinked
into a message as hash-busters.

Reply via email to