Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: 'spamc/spamassassin' crashing with overlong blank line spams?

From: John D. Hardin <jhardin(at)impsec.org>
Date: Wed Sep 19 2007 - 11:14:48 EDT


On Wed, 19 Sep 2007, Matt Kettler wrote:

> > PS.: Ideas welcome for catching the characteristic Subject of
> > those spams, which look like 'just random tty line noise'!
>
> Something like this might be a first shot:
>
> header NO_ALPHA_SUBJECT Subject !~ /[a-zA-Z0-9]/

I've seen some of those. Maybe this would be less FP-prone:

  header LINE_NOISE_SUBJ Subject =~ /\W{10,}/

Arr!

--
 John Hardin KA7OHZ                    
http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The Constitution is a written instrument. As such its meaning does
  not alter. That which it meant when adopted, it means now.
                    -- U.S. Supreme Court
                       SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905) 
-----------------------------------------------------------------------
 Today: Talk Like a Pirate day
Received on Wed Sep 19 11:15:54 2007

This archive was generated by hypermail 2.1.8 : Sat Oct 27 2007 - 08:53:43 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library