Regex to detect gibberisk

[Marc Perkel <su...@junkemailfilter.com>]

Anyone have a good way to catch these? Mostly coming from Hotmail.

Subject:

ALotOfTim eToOrd erPil lGood sFro mHe alt hSh op

Body:

<link to yahoo groups or blog>

onsgMRpa otaaeseB Atlp ift aTrtrss lsskcei . BROhd hoidn lod sew 
esodcywsn csTOUwive nlt hfrri dda otaigbha e

TR' adwfh eoTn htnotdw btbd e. UL eofotg esng tthsnl iaehpcn HWte 
eaorirtn HOIEes sss trlRRe hpkgbagt hao ewRet dvi, hi . RGAtp tees 
ocrbwfs sEki frn lgDiiho, dETHTp itbrifra IShism a'ef ihojnfNL ayeecsaca 
idhcAOEHuie erefe ishttcUL ituhi dsiaiel ahenh

-- 
Marc Perkel - Sales/Support
support@junkemailfilter.com
http://www.junkemailfilter.com
Junk Email Filter dot com
415-992-3400

Re: Regex to detect gibberisk

[John Hardin <jh...@impsec.org>]

On Sun, 23 Oct 2011, Marc Perkel wrote:

> Anyone have a good way to catch these? Mostly coming from Hotmail.
>
> Subject:
>
> ALotOfTim eToOrd erPil lGood sFro mHe alt hSh op

There is a rule for that in my sandbox. I'd have to look to see whether 
it's been promoted to active.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   The United States has become a place where entertainers and
   professional athletes are mistaken for people of importance.
                                         -- Maureen Johnson Smith Long
-----------------------------------------------------------------------
  318 days since the first successful private orbital launch (SpaceX)