You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by jdow <jd...@earthlink.net> on 2007/06/01 02:08:56 UTC

Re: OBSCURED_EMAIL ?

From: "Kelson" <ke...@speed.net>
> Per Jessen wrote:
>> Theo Van Dinter wrote:
>> 
>>> On Thu, May 31, 2007 at 09:46:56AM +0200, Per Jessen wrote:
>>>> I've been looking at what a rot13'ed email-address looks like, and it
>>>> doesn't come close to matching the pattern above.
>>> rot13 is a common/well-defined version of a single substitution
>>> cipher.  This rule tries to match those, not the rot13 a-m <-> n-z
>>> mapping specifically.
>> 
>> Then why is the pattern very specific wrt '^' and '(' ?
> 
> Because it's very common (or at least was at one time) for spammers to 
> rot13 the target addresses and then do those specific substitutions.

Or base64 or other "obvious" but not rot13 encodings are often used.
{^_^}