You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Savoy, Jim" <sa...@uleth.ca> on 2008/03/12 22:28:15 UTC

RE: "Nice girl like to chat" spam

ItsMikeE wrote:

> I have been running this rule for a day now, and am trapping 
> the spams with rules 1 and 2.

I too just started running these rules, but noticed there were a lot
more NICE_GIRL_02's than NICE_GIRL_01's being hit (about twice as many
of the former).

I think you need to change:

body NICE_GIRL_01 /Hello! I am (?:bored|tired)
(?:today|this(?:afternoon|evening)|tonight)\./

to:

body NICE_GIRL_01 /Hello! I am (?:bored|tired) (?:today|this
(?:afternoon|evening)|tonight)\./

(ie add a <space> after the word "this").

to catch them all.

NICE_GIRL_01 was only catching:

Hello! I am bored today.
Hello! I am bored tonight.
Hello! I am tired today.
Hello! I am tired tonight.

But none of the afternoon/evening variations.

 - jim -

Re: "Nice girl like to chat" spam

Posted by Kris Deugau <kd...@vianet.ca>.
Savoy, Jim wrote:
> I think you need to change:
> 
> body NICE_GIRL_01 /Hello! I am (?:bored|tired)
> (?:today|this(?:afternoon|evening)|tonight)\./
> 
> to:
> 
> body NICE_GIRL_01 /Hello! I am (?:bored|tired) (?:today|this
> (?:afternoon|evening)|tonight)\./
> 
> (ie add a <space> after the word "this").

It probably got lost due to word wrap (I *did* warn about that in my 
original posting, didn't I?);  the line is just over 100 characters long 
in my rule files.  <g>

-kgd