70_sare_stocks.cf

[Dhawal Doshy]

Daniel Maher wrote:
> Hello,
> 
> Would it be possible for you to post a diff for your tweaks?  I'm curious, and I'm sure I'm not the only one! :)

here..
[root at sauron ~]# diff 70_sare_stocks.cf 70_sare_stocks.cf.20060803-1409
2c2
< # Version: 01.00.28
---
 > # Version: 01.00.27
4c4
< # Modified: 2006-08-02
---
 > # Modified: 2006-07-24
48d47
< # 01.00.28 Tweeked GIF catcher rule.
729c728
< full     SARE_GIF_ATTACH   /name=\"?[0-9a-z._\-]{3,18}\.gif\"?/i
---
 > full     SARE_GIF_ATTACH   /name=\"[a-z.]{3,18}\.gif\"/i

Works fine for me so far.. in addition i use these posted on the 
sa-users list.. though i ought to be using the second one as a meta rule.

rawbody INLINE_IMAGE    /src\s*=\s*["']cid:/i
describe INLINE_IMAGE   Inline Image
score INLINE_IMAGE  2.0

rawbody INLINE_IMAGE2    /src\s*=\s*["']cid:image001\.gif/i
describe INLINE_IMAGE2   Inline Image image001.gif
score INLINE_IMAGE2  2.0

>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Doc Schneider
>> Sent: August 3, 2006 1:29 AM
>> To: MailScanner discussion
>> Subject: 70_sare_stocks.cf
>>
>> I added a "tweak" to the rule set that should catch more of these dang
>> image spams.
>>
>> For those of you running "SARE_STOCK" please let me know if these are
>> now being caught.
>>
>> Thanks!
>>
>> I can be contacted off list either at this address or maddoc at maddoc.net
>> which is the contact address in the rules.
>>
>> --
>> -Doc
>> Lincoln, NE.
>> http://www.genealogyforyou.com/
>> http://www.cairnproductions.com/