On Mon, 12 Aug 2002, Rik van Riel wrote:
> Little chance. These messages are generally written in such a way
> that there are no useful regexps to distinguish the 419 spam from
> legitimate email.
use a procmail scoring filter, case sensitive, and score a la:
* 5^6 ([nN]igeria|[Aa]bacha|[zZ]imbabwe|[mM]ugabe)
* 10^6 (MUGABE|MILLION|DOLLARS|NIGERIA|ABACHA|ZIMBABWE)
most of my mail will start with a default score of at least -50. and
above catches 90ish% of 419 spam to me. no reason why spamassassin
couldnt do this too. (presuming it has weighted scoring like
procmail).
[paul@fogarty tmp]$ wc -l ~/.procspam
493 /home/paul/.procspam
and i plan to add the multi-k lines nl.linux.org anti-spam regexps to
it some time too. :)
> Rik
regards,
-- Paul Jakma paul@clubi.ie paul@jakma.org Key ID: 64A2FF6A warning: do not ever send email to spam@dishone.st Fortune: That's the true harbinger of spring, not crocuses or swallows returning to Capistrano, but the sound of a bat on a ball. -- Bill Veeck- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Thu Aug 15 2002 - 22:00:30 EST