Re: [Evolution-hackers] spam filtering

["Curtis C. Hovey" <sinzui cox net>]

On Wed, 2003-10-01 at 12:27, Radek Doulík wrote:
> Hi all,
> 
> before I start implementing spam filtering for evolution, I would like
> to discuss my plan. Please read the whole mail and comment. I am
> describing the model from user view and then implementation details
> and some things to think about. I took Ettore's model as a base and
> modified it a little bit - mostly simplified.


I've had great success blocking emails that try to obfuscate their
content using a few rules that Evolution is already capable of.  I hope
these rules will be helpful to you:

HTML NONSENSE

Breaking words with inappropriate use of comments
Regex Match Message Body: -->[a-z]{2,4}<!--

Markup in the title
Regex Match Message Body: <title>[^/]+<!--[^/]+</title>

Invalid closing tags used to break words
Regex Match Message Body: </[^-="<>]+ [^="<>]+ [^="<>]+

Invalid comments
Regex Match Message Body: <![a-z]>

Random character that take the form of words are easy to spot, but
regex.h doesn't support the multiline matching required to be 100%
successful.  I'm still refining this rule, which looks for words without
vowels:

Regex Match Message Body: \<[qwrtpsdfghjklzxcvbnm]+\>[
\t]+\<[qwrtpsdfghjklzxcvbnm]+\>[ \t]+\<[qwrtpsdfghjklzxcvbnm]+\>

-- 
__C U R T I S  C.  H O V E Y____________________
sinzui cox net
Guilty of stealing everything I am.