Brian Ipsen wrote:
 Recently I've noticed at lot of spammer emails in html format containg
entries like:

<SPAN style="DISPLAY: none"> perfume </SPAN>

The text/word in the SPAN tags is random.... Has anyone implemented a rule
to assign a high score for messages, which matches this pattern (with the
"display: none" style) ??

I use the following rule which seems to work well:

full     local_DISPLAY_NONE     /\bdisplay\s?:\s?none\b/i
describe local_DISPLAY_NONE     Style with "display: none" CSS attribute
score    local_DISPLAY_NONE     2.0



John.

--
-- Over 2500 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr

Reply via email to