You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by fchan <fc...@molsci.org> on 2008/12/02 23:12:30 UTC
Trying the write a rule for the html alt text.
I'm having much spam that has html with the common alt test portion.
The http link to where ever and the images always changes so I need
to use the alt text portion of the is html to key off. Below is the
paste link of the html:
http://pastebin.ca/1274188
Thank you,
Frank
Re: Trying the write a rule for the html alt text.
Posted by fchan <fc...@molsci.org>.
Your correct. However they have several thousand or more these sites
for their phishing schemes so each message I get is from a different
domain and some are not blacklisted yet so they get through. The only
common theme is the alt text.
Thank you,
Frank
>On Tue, December 2, 2008 23:12, fchan wrote:
>
>> http://pastebin.ca/1274188
>
>domain listed in URIBL
>
>--
>Benny Pedersen
>Need more webspace ? http://www.servage.net/?coupon=cust37098
Re: Trying the write a rule for the html alt text.
Posted by Benny Pedersen <me...@junc.org>.
On Tue, December 2, 2008 23:12, fchan wrote:
> http://pastebin.ca/1274188
domain listed in URIBL
--
Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098
Re: Trying the write a rule for the html alt text.
Posted by fchan <fc...@molsci.org>.
Thank you. This is what I needed. Silly of me missing that.
Frank
>On Tue, 2008-12-02 at 14:12 -0800, fchan wrote:
>> I'm having much spam that has html with the common alt test portion.
>> The http link to where ever and the images always changes so I need
>> to use the alt text portion of the is html to key off. Below is the
>> paste link of the html:
>>
>> http://pastebin.ca/1274188
>
>You can do that with rawbody rules.
>
>See section Rule Definitions in the docs.
> http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html
>
>
>--
>char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
>main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
>(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Trying the write a rule for the html alt text.
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Tue, 2008-12-02 at 14:12 -0800, fchan wrote:
> I'm having much spam that has html with the common alt test portion.
> The http link to where ever and the images always changes so I need
> to use the alt text portion of the is html to key off. Below is the
> paste link of the html:
>
> http://pastebin.ca/1274188
You can do that with rawbody rules.
See section Rule Definitions in the docs.
http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}