From Robert@menschel.net Wed Feb  9 07:24:54 2005
From: Robert Menschel <Robert@menschel.net>
To: discuss@lists.surbl.org
Subject: [SURBL-Discuss] Re: rule for mixed case URI scheme
Date: Tue, 08 Feb 2005 22:24:42 -0800
Message-ID: <14410653805.20050208222442@Menschel.net>
In-Reply-To: <16898.58599.424614.185555@proton.pathname.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0044131157636594033=="

--===============0044131157636594033==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Daniel,

Thursday, February 3, 2005, 6:58:47 PM, you wrote:

DQ> Something close to this will be in 3.1, so you'll want to remove
DQ> the rule then, maybe name it something else too.=20

DQ>   uri URI_SCHEME_MIXED_CASE	/^(?![a-z]{3,6}:|[A-Z]{3,6})[A-Za-z]{3,6}:\//
DQ>   describe URI_SCHEME_MIXED_CASE	URI scheme has mixed uppercase and lower=
case

DQ> The mass-check results are good, hits about 1% of spam with
DQ> basically no false positives in 92,000 hams from 6 people.

Found a ham hit in a corpus I'm analyzing:

<a href=3DNotes:///8525679900664A0D/38D46BF5E8F08834852564B500129B2C/991A65E0=
B32F1E3385256F94004AC059>Link</a>

I'm guessing that's an internal link used by Lotus Notes.  A lot of
private information in the email, so it's not one I'm able to submit,
and I'm still not ready to rejoin the nightly mass-check.

Bob Menschel




--===============0044131157636594033==--