Re: Geocities rule

2007-03-26 Thread Bill McCormick
Bill McCormick wrote: Bill McCormick wrote: Bill McCormick wrote: I switched from using a RulesDeJour update script to sa-update. I'm no longer getting hits on these geocites spams. Anybody know which sare rule I need to add? I found and load the WebRedirect Plugin: http://wiki.apache.org/

Re: Geocities rule

2007-03-26 Thread Bill McCormick
Bill McCormick wrote: Bill McCormick wrote: I switched from using a RulesDeJour update script to sa-update. I'm no longer getting hits on these geocites spams. Anybody know which sare rule I need to add? I found and load the WebRedirect Plugin: http://wiki.apache.org/spamassassin/WebRedirect

Re: Geocities rule

2007-03-26 Thread Bill McCormick
Bill McCormick wrote: I switched from using a RulesDeJour update script to sa-update. I'm no longer getting hits on these geocites spams. Anybody know which sare rule I need to add? I found and load the WebRedirect Plugin: http://wiki.apache.org/spamassassin/WebRedirectPlugin Can anybody tel

Re: geocities rule?

2005-11-19 Thread Jeff Chan
On Tuesday, November 15, 2005, 3:47:22 PM, Loren Wilton wrote: >> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A > lot of >> "enthusiast" websites of various sorts are hosted there and my users like > to >> forward around links to them. > I wonder what the effect of listi

RE: geocities rule?

2005-11-16 Thread Pierre Thomson
Daryl C. W. O'Shea wrote: > List Mail User wrote: >> Of course, the originals transmogrify quite quickly and the '/?' >> was posted a couple of days ago. > > Actually it was posted a couple weeks ago. About two or three days > later I started to get spams without the query string. The rule

Re: geocities rule?

2005-11-16 Thread List Mail User
>... >List Mail User wrote: >> Of course, the originals transmogrify quite quickly and the '/?' >> was posted a couple of days ago. > >Actually it was posted a couple weeks ago. About two or three days >later I started to get spams without the query string. The rule worked >well for a few

Re: geocities rule?

2005-11-15 Thread Daryl C. W. O'Shea
List Mail User wrote: Of course, the originals transmogrify quite quickly and the '/?' was posted a couple of days ago. Actually it was posted a couple weeks ago. About two or three days later I started to get spams without the query string. The rule worked well for a few weeks befo

Re: geocities rule?

2005-11-15 Thread List Mail User
>... >> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A >lot of >> "enthusiast" websites of various sorts are hosted there and my users like >to >> forward around links to them. > >I wonder what the effect of listing /\w\.\w\w\.geocities\.com\b/ would be? >That would only c

Re: geocities rule?

2005-11-15 Thread Matt Kettler
Matt Kettler wrote: > mouss wrote: > >>Matt Kettler a écrit : >> >> >>>mouss wrote: >>> >>> >>> They used other geocities sites since a long time. I just score 4 for any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. >>> >>> >>>Unfortunately, I've had plenty of FPs with

Re: geocities rule?

2005-11-15 Thread Matt Kettler
mouss wrote: > Matt Kettler a écrit : > >> mouss wrote: >> >> >>> They used other geocities sites since a long time. I just score 4 for >>> any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. >>> >> >> >> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. > > Y

Re: geocities rule?

2005-11-15 Thread mouss
Matt Kettler a écrit : mouss wrote: They used other geocities sites since a long time. I just score 4 for any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. You may have missed the "/?" part. I don't

Re: geocities rule?

2005-11-15 Thread Loren Wilton
> Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A lot of > "enthusiast" websites of various sorts are hosted there and my users like to > forward around links to them. I wonder what the effect of listing /\w\.\w\w\.geocities\.com\b/ would be? That would only catch the non-

Re: geocities rule?

2005-11-15 Thread Matt Kettler
mouss wrote: > > They used other geocities sites since a long time. I just score 4 for > any "*.geocities.com/*/?" URLs. for now, I have no FN, no FP. Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A lot of "enthusiast" websites of various sorts are hosted there and my use

Re: geocities rule?

2005-11-15 Thread mouss
Evan Platt a écrit : I run my own site, so my site, my rules... But looking through my archived mail for uk.geoc1ties.com, I see NO legit mail. I'm at the point of adding a body_check rule in postfix to /dev/null anything with the above in the body. I see now they've started to use de.geoc

Re: geocities rule?

2005-11-15 Thread Evan Platt
At 12:43 PM 11/15/2005, you wrote: This is a collection of various geocities rules that I've been using. You might want to run them by a corpus to see what their FPs are like for you, but this is a good starting point. These are based on rules posted by others on the list, with a few limited ha

Re: geocities rule?

2005-11-15 Thread Matt Kettler
Jeff Chan wrote: > Does anyone have a geocities rule that catches most of the spams > and has few FPs? This is a collection of various geocities rules that I've been using. You might want to run them by a corpus to see what their FPs are like for you, but this is a good starting point. These are

Re: geocities rule?

2005-11-13 Thread Simon Byrnand
At 01:18 14/11/2005, mouss wrote: Jeff Chan a écrit : Does anyone have a geocities rule that catches most of the spams and has few FPs? after looking at many of these, I ended up just giving 4 points to any http://*.geocities.com/*/? (written as perl expression of course). together with Baye

Re: geocities rule?

2005-11-13 Thread jdow
From: "mouss" <[EMAIL PROTECTED]> Jeff Chan a écrit : Does anyone have a geocities rule that catches most of the spams and has few FPs? after looking at many of these, I ended up just giving 4 points to any http://*.geocities.com/*/? (written as perl expression of course). together with Baye

Re: geocities rule?

2005-11-13 Thread List Mail User
>... >Does anyone have a geocities rule that catches most of the spams >and has few FPs? > >Cheers, > >Jeff C. >-- >Jeff Chan >mailto:[EMAIL PROTECTED] >http://www.surbl.org/ > Do you want to block the general drug spam, the "SoftTab"/ED spam, the porn, the penis enhancers or the stock pum

Re: geocities rule?

2005-11-13 Thread mouss
Jeff Chan a écrit : Does anyone have a geocities rule that catches most of the spams and has few FPs? after looking at many of these, I ended up just giving 4 points to any http://*.geocities.com/*/? (written as perl expression of course). together with Bayes and other tests, this seems to b

Re: geocities rule?

2005-11-13 Thread Ilan Aisic
I've recently gave up on geocities alltogether and wrote a simple rule to give any mail coming from it a high score. AFAIK, my users never get any legit mail from geocities anyway.  I'm sure it'll generate FPs to other people.On 11/13/05, Jeff Chan < [EMAIL PROTECTED]> wrote:Does anyone have a geoc