Re: [exim] System Filter Syntax Help

On 7/25/06, Lukas <luca.dc@???> wrote:

> I know this may be a newbye question but I really need an help.
> I am trying to fight the last type of spam, the one in which the
> spammers use typos to fool spamassassin.
> So I am trying, without success, to write a rule for the System Filter
> to block every combination, for example, of the word "viagra".
> Something that can match also typos like "VIAjGRA", "vIAgGRa".
>
> What I mean is... how can I write a rule that is able to recognize the
> word "v*i*a*g*r*a" where the X are every possible character?
> Do you think it would be more correct to put it in the ACL check section?

Lukas,

I'm pretty sure SpamAssassin already has rules to catch this type of
spam. However, these words on their own are maybe not enough to give a
score high enough to be marked as spam.

While what you want to do is possible in Exim, perhaps the best approach
would be to write some custom rules in SpamAssassin, or otherwise work
out why SA is not catching this obvious spam (e.g. have you got network
tests enabled, are you using Bayes, etc).

regards,
John