header SUBJECT_FUZZY_MEDS Subject =~ /<M><E><D><S>/i
describe SUBJECT_FUZZY_MEDS Attempt to obfuscate words in Subject:
replace_rules SUBJECT_FUZZY_MEDS
looks like it will fp on anything with meds in the subject line, inside
a word, etc
its already in bugzilla:
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5380
the following (small snipet) is enough to trigger this:
(save to a file, yes, just these lines is enough)
------------begin---
Subject: Someone: Review Meds
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-1130195460-1249928373=:51768"
--0-1130195460-1249928373=:51768
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
-<<<EOF
egrep doesn't seem to have a problem.
egrep -i '<M><E><D><S>' /tmp/iIBXB3NcLKNJ.eml
easy enough to fix in nightlyupdates?
Im setting score to 1.0 for now.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
