Re: Phishing: My rule and thoughts

2005-06-23 Thread mouss
Murty Rompalli wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I did get this and other replies from list users! My rule does not assign a score of 5.0 (threshold to call it spam for sure). If it assigns [X] positive scores, it may cause FPs. [ ] negative scores, it may case NPs. [ ]

Re: Phishing: My rule and thoughts

2005-06-22 Thread Kai Schaetzl
Murty Rompalli wrote on Tue, 21 Jun 2005 06:59:27 -0400 (EDT): > So ebay,paypal, > amazon are not safe and not suitable for most ordinary people, only > advanced users. Well, I think, if one doesn't read email in HTML format those phish are pretty safe to digest. Kai -- Kai Schätzl, Berlin,

Re: Phishing: My rule and thoughts

2005-06-21 Thread Murty Rompalli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I know emails from eBay with links and other emails with url links in signature are hit with my custom rules...but as I said, one can lower the scores all the way to 0.01 if needed. I also believe that ebay, paypal and amazon are the top items for p

Re: Phishing: My rule and thoughts

2005-06-20 Thread hamann . w
Thank you for the report but is it fair to run masses for filtering phishing emails ? Phishing emails are not sent using the same bulk mailing software spammers use. Spammers most of the time dont even understand SMTP 451 retry but phishermen do. Also, phish doesn't go with spam and ham..its seafoo

Re: Phishing: My rule and thoughts

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 08:05:32PM -0400, Murty Rompalli wrote: > Also, I believe PGP signed messages cause a negative score. Can someone > confirm this one, I am lazy after a long day. I know TRUSTED_HOSTS has a > negative score to compensate, just dont know if PGP signed carries > negative score

Re: Phishing: My rule and thoughts

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 08:01:15PM -0400, Murty Rompalli wrote: > Thank you for the report but is it fair to run masses for filtering > phishing emails ? Sure, why not? Phish mails are spam. -- Randomly Generated Tagline: "Special? Our longest phone conversation is 'Get over here.'" - Ross on

Re: Phishing: My rule and thoughts

2005-06-20 Thread Murty Rompalli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I did get this and other replies from list users! My rule does not assign a score of 5.0 (threshold to call it spam for sure). So, an email can still get a score of 4.0 from my phish block rule and still go through unless ofcourse you changed the t

Re: Phishing: My rule and thoughts

2005-06-20 Thread jdow
From: "Murty Rompalli" <[EMAIL PROTECTED]> Quite fair - look at all the ham the rules hit. They are not very good rules. {^_^} > Thank you for the report but is it fair to run masses for filtering > phishing emails ? Phishing emails are not sent using the same bulk mailing > software spammers us

Re: Phishing: My rule and thoughts

2005-06-20 Thread Murty Rompalli
Thank you for the report but is it fair to run masses for filtering phishing emails ? Phishing emails are not sent using the same bulk mailing software spammers use. Spammers most of the time dont even understand SMTP 451 retry but phishermen do. Also, phish doesn't go with spam and ham..its seafoo

Re: Phishing: My rule and thoughts

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 08:29:19AM -0700, Kenneth Porter wrote: > >OVERALL% SPAM% HAM% S/ORANK SCORE NAME > > How does one read this chart? (Ideally I'm looking for an answer in the > wiki, but I couldn't find one there. I thought it might be in the FAQ or > under SubmittingNewR

Re: Phishing: My rule and thoughts

2005-06-20 Thread Kenneth Porter
--On Sunday, June 19, 2005 8:16 PM -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: OVERALL% SPAM% HAM% S/ORANK SCORE NAME How does one read this chart? (Ideally I'm looking for an answer in the wiki, but I couldn't find one there. I thought it might be in the FAQ or under

Re: Phishing: My rule and thoughts

2005-06-19 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 01:58:52AM +0200, mouss wrote: > >Here is my custom spamass rule file to block Phishing emails. Please note > >that this is aggressive and you may want to lower scores. But I refuse to > >lower scores for my mail server :) FYI: OVERALL% SPAM% HAM% S/ORANK

Re: Phishing: My rule and thoughts

2005-06-19 Thread mouss
Murty Rompalli wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here is my custom spamass rule file to block Phishing emails. Please note that this is aggressive and you may want to lower scores. But I refuse to lower scores for my mail server :) Murty's Phish Block: http://solar.murty.net

Phishing: My rule and thoughts

2005-06-19 Thread Murty Rompalli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here is my custom spamass rule file to block Phishing emails. Please note that this is aggressive and you may want to lower scores. But I refuse to lower scores for my mail server :) Murty's Phish Block: http://solar.murty.net/~murty/sa/Murty.phishbl