Re: [SLUG] {SPAM?} procmail scripting

From: jeff (jdavis70@tampabay.rr.com)
Date: Wed Jul 27 2005 - 16:30:00 EDT


On Wednesday 27 July 2005 3:10, patrick grantham wrote:
> I never thought I would spend so much time scrutinizing spam. Email
> filters are not catching spam with the numerous plays on of spellings on
> various drugs (i.e. Viagra, cialis, Claritin, etc.
>
> I've notice that the in most cases the emails contain (what seems like)
> about 2/3 to 3/4 of the characters of various drugs and usually in the
> proper order. My endeavor is this, trap email based on how close letters
> of certain words is to the proper spelling for a specific word. For
> example, "Viiagra", "caii lis", "\/iagra", "veyeagra", "I enjoyed your
> website I found vie*1 agra useful, blah blah blah, yada yada yada" all
> would give positive hits (all of which I've seen actually occur. Despite
> the obvious misspellings, the letters of the word are in the correct order
> and each have more than 2/3 of the correct letters in the proper order.
>
> Does this sound doable using procmail? There only 30-50 mailboxes/aliases
> on this system.
>
> Comments? Is there a better way to customize spamAssasin to accomplish
> this?
>
> I can't seem to find options for spamAssasin to change the point value for
> various tests. Suggestions?
>
> --Patrick

That's strange. I run spamassassin with the default settings and it catches
all of the misspelled pharmacy and enhancement spams. When I first tried SA,
a few of the spelling variants slipped by before sa-learn had been run a few
times. Since then, it is _very_ rare for a spam to escape spamassassin on my
pc. I assume that you are running sa-learn on the spam directory regularly.
If you are not, that is why these spams are getting through. SA doesn't know
that they are spam otherwise.

Jeff
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:29:49 EDT