On Wed, 8 Oct 2008 19:45:08 -0400, "Diane Poremsky [MVP]" wrote:

You'll need to use a 3rd party tool, trying to create a rule to catch all
the funky spellings and embedded code is impossible.

Put "impossible" in context.

Here are samples from 5 different "Replica Watch" spams:

Re ubx pl cmb ic gop a ygp Wa nuk tch snt es
Re gbl pl idx ic yss a osj Wa vrq tch chq es
Re qko pl dqp ic vre a ivm Wa oyl tch sxn es
Re plw pl wik ic fub a fvq Wa uxj tch ibm es
Re kgc pl wdn ic qvd a dbr Wa ggo tch cjy es

IF SUBSTRING(1,2) = "Re" and SUBSTRING(8,9) = 'pl' AND
... AND SUBSTRING(42,43) = 'es' THEN MESSAGE = SPAM

Context: O2k won't let me program, hence "impossible".

Eh?

P

"Take Yo' Hand Out My Pocket (I Ain't Got Nothing What Belongs To You)!"
- Rice Miller, who probably never even _heard_ of GW Bush, Paulson, etc