You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michelle Konzack <li...@tamay-dogan.net> on 2009/07/15 21:50:23 UTC

FW by nimbostratus@courseclair.com : curtailer

Hello,

for some minutes I have gotten a bunch of spams using:

How to Satisfy a Woamn sexually - eLading Her Mind.www[dot]ku17[dot]net

Arghhhhh!  OK such crap was catched by some other procmail recipes,  but
it would be nice, ic SA could handel it

Thanks, Greetings and nice Day/Evening
    Michelle Konzack
    Systemadministrator
    Tamay Dogan Network
    Debian GNU/Linux Consultant

-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
<http://www.tamay-dogan.net/>                 Michelle Konzack
<http://www.can4linux.org/>                   c/o Vertriebsp. KabelBW
<http://www.flexray4linux.org/>               Blumenstrasse 2
Jabber linux4michelle@jabber.ccc.de           77694 Kehl/Germany
IRC #Debian (irc.icq.com)                     Tel. DE: +49 177 9351947
ICQ #328449886                                Tel. FR: +33  6  61925193

Re: FW by nimbostratus@courseclair.com : curtailer

Posted by John Hardin <jh...@impsec.org>.
On Wed, 15 Jul 2009, Michelle Konzack wrote:

> How to Satisfy a Woamn sexually - eLading Her Mind.www[dot]ku17[dot]net

The "[dot]" is literal?

I've updated my obfuscated-URI sandbox rules.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Taking my gun away because I *might* shoot someone is like cutting
   my tongue out because I *might* yell "Fire!" in a crowded theater.
                                                   -- Peter Venetoklis
-----------------------------------------------------------------------
  Tomorrow: the 64th anniversary of the dawn of the Atomic Age

Re: FW by nimbostratus@courseclair.com : curtailer

Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Wed, 2009-07-15 at 21:50 +0200, Michelle Konzack wrote:
> for some minutes I have gotten a bunch of spams using:
> 
> How to Satisfy a Woamn sexually - eLading Her Mind.www[dot]ku17[dot]net

There's yet a human comprehensible obfuscation to come up with, which
we've not seen years ago already. ;)  IMHO, all these will stop sooner
or later -- again.


> Arghhhhh!  OK such crap was catched by some other procmail recipes,  but
> it would be nice, ic SA could handel it

And indeed, I've been hacking on exactly this. Stay tuned.


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}