[SLUG] {SPAM?} procmail scripting

From: patrick grantham (pwgrant@cssi-fl.com)
Date: Wed Jul 27 2005 - 15:10:01 EDT


I never thought I would spend so much time scrutinizing spam. Email filters
are not catching spam with the numerous plays on of spellings on various
drugs (i.e. Viagra, cialis, Claritin, etc.

I've notice that the in most cases the emails contain (what seems like)
about 2/3 to 3/4 of the characters of various drugs and usually in the
proper order. My endeavor is this, trap email based on how close letters of
certain words is to the proper spelling for a specific word. For example,
"Viiagra", "caii lis", "\/iagra", "veyeagra", "I enjoyed your website I
found vie*1 agra useful, blah blah blah, yada yada yada" all would give
positive hits (all of which I've seen actually occur. Despite the obvious
misspellings, the letters of the word are in the correct order and each have
more than 2/3 of the correct letters in the proper order.

Does this sound doable using procmail? There only 30-50 mailboxes/aliases
on this system.

Comments? Is there a better way to customize spamAssasin to accomplish
this?

I can't seem to find options for spamAssasin to change the point value for
various tests. Suggestions?

--Patrick

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:29:38 EDT