On Mon, 27 Jul 2009, Daniel J McDonald wrote:
On Mon, 2009-07-27 at 17:31 +0300, Jari Fredriksson wrote:
On Mon, 2009-07-27 at 14:51 +0100, rich...@buzzhost.co.uk wrote:
I also used these local rules (some shamelessly copied off this
forum):
body __TRMB_YOUR_NAME
/(^|\W)(your(\s+|\s+\w+\s+)names?|last.name:|full.names?|surname|Prenom|fullname|names?
in full|with your.? Serial No|Confirmation Email
Serial|Names?(\s+:|:)|Receiver name)(_|\W)/i
After I splatted these rules here, I saw that they were pretty
in-efficient perl-wise, and matched a bit much logic wise. I've
tightened them up, and I think this is better, but I'd appreciate
suggestions:
body __TRMB_YOUR_NAME
/\b(?:your.{0,10}\bnames?|last.name:|full.names?|surname|Prenom|fullname|names?
in full|with your.? Serial No|Confirmation Email Serial|Names?\s?:|Receiver
name)_{0,40}\b/i
body __TRMB_YOUR_ADDRESS
/\b(?:your|home|residen|contact|full|current).{0,20}\b(?:add[er]{2,4}sse?|location|country|marital
status|occupation)_{0,40}\b/i
body __TRMB_YOUR_PHONE
/\b(?:telephone|tel|phone)\s?(?:num(?:ber)?|\#)?[[:space:][:punct:]]{1,5}\D/i
body __TRMB_YOUR_AGE /\b(?:your\s)?age\s?[[:punct:]]{1,40}\b/i
body __TRMB_YOUR_OCCUPATION
/\b(?:your\s)?(?:occupation|profession)_{0,30}\b/i
body __TRMB_YOUR_BLOBBY_DETAILS /\b(?:full
names?.{1,20}address.{1,20}phone num|phone and fax number|your
telephone.fax|your full contact details|send us your fullnames? and
address|your mobile numbers?|please reply if you are willing to help me
save|send the following informations?|provide your email address.? phone
number)/i
body __TRMB_OTHER_DETAILS /\b(?:with your full contact
informations?|contact the application desk)\b/i
meta __TRMB_YOUR_DETAILS ((__TRMB_YOUR_NAME || __TRMB_OTHER_DETAILS)
&& (__TRMB_YOUR_ADDRESS || __TRMB_YOUR_PHONE || __TRMB_YOUR_AGE ||
__TRMB_YOUR_OCCUPATION) || __TRMB_YOUR_BLOBBY_DETAILS )
meta AE_DETAILS_WITH_MONEY __TRMB_YOUR_DETAILS && (MILLION_EURO ||
MILLION_USD || US_DOLLARS_3 || NA_DOLLARS || FRT_DOLLAR || AE_GBP || __FRAUD_DBI)
describe AE_DETAILS_WITH_MONEY Has form and mentions much money
meta AE_DETAILS_WITH_EMAIL __TRMB_YOUR_DETAILS && __HAS_ANY_EMAIL
describe AE_DETAILS_WITH_EMAIL Has form and gives handy email to send it back
to
score AE_DETAILS_WITH_MONEY 2.0
score AE_DETAILS_WITH_EMAIL 2.5
How about:
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_fillform.cf?view=log
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...much of our country's counterterrorism security spending is not
designed to protect us from the terrorists, but instead to protect
our public officials from criticism when another attack occurs.
-- Bruce Schneier
-----------------------------------------------------------------------
9 days until the 274th anniversary of John Peter Zenger's acquittal
