Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Yorkshire Dave
On Thu, 2003-06-12 at 21:18, Stuart Gall wrote: > > > > if you want something site specific AND effective, try searching the > > bodies for mycompany.com ROT13'd or backwards like moc.ynapmocym > > > > I have a few more if anybody really wants them :) > > > > Are you saying that spammers use RO

Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Stuart Gall
> > if you want something site specific AND effective, try searching the > bodies for mycompany.com ROT13'd or backwards like moc.ynapmocym > > I have a few more if anybody really wants them :) > Are you saying that spammers use ROT13 to "encode" the target company name? That is realy sad. St

Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Yorkshire Dave
On Thu, 2003-06-12 at 17:08, Mike Scheidler wrote: > "Yorkshire" == Yorkshire Dave <[EMAIL PROTECTED]> writes: > Yorkshire> > >> # Long-gone user listed in the To: or Cc: line > >> headerANCIENT_RCPT ToCc =~ /(joeuser1|joeuser2|joeuser3)/i > >> describe ANCIENT_RCPT LOCAL: Long-departed

Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Mike Scheidler
"Yorkshire" == Yorkshire Dave <[EMAIL PROTECTED]> writes: Yorkshire> >> # Long-gone user listed in the To: or Cc: line >> headerANCIENT_RCPT ToCc =~ /(joeuser1|joeuser2|joeuser3)/i >> describe ANCIENT_RCPT LOCAL: Long-departed user ID in addressee list >> score ANCIENT_RCPT 4.0 Y

Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Yorkshire Dave
On Thu, 2003-06-12 at 15:50, Mike Scheidler wrote: > There was some discussion last week about custom site-wide rules that are > based on knowledge of the local mail domain. Here are two custom rules I > have been using recently that have been very successful. The first rule is > based on the ass

Re: [SAtalk] A couple of custom rules

2003-06-12 Thread Chr. von Stuckrad
On Thu, Jun 12, 2003 at 09:50:38AM -0500, Mike Scheidler wrote: > (gone for over 4 years) is most likely spam. The second rule assumes that > mail addressed to people who have been gone from the company for years is > spam. Even though their accounts no longer exist, this rule flags those > multi

[SAtalk] A couple of custom rules

2003-06-12 Thread Mike Scheidler
There was some discussion last week about custom site-wide rules that are based on knowledge of the local mail domain. Here are two custom rules I have been using recently that have been very successful. The first rule is based on the assumption that mail sent to anybody at our old mail server (g