[Dshield] 1.txt emails again

KEREM ERKAN kerem.erkan at basari.com.tr
Tue Aug 9 06:43:50 GMT 2005


On 09.Ağu.2005, at 05:35, Kevin wrote:


Can this be used for a reliable spam filter signature?





Doesn't look like it unless you can use the entire HTML body as a
signature,

there's not enough "meat" here to write a filter that won't return

false positives.


My 2 cents:

You may use a Spamassassin rule like:

/----------[a-z]{20}\b/

Seems like it only has lowercase letters and all boundaries are 20
letters long. I don't think some legitimate application will put a
boundary like this.

Kerem


More information about the list mailing list