We have writing some custom spam rules, and would like your input

 

We originally wrote some of these when a blatantly obvious spam came in with a score of 0

 

If you could, run them against your mail, and see if it triggers any false positives..

 

 

Thanks

 

header CUSTOM_FREE_HD                   Subject =~ /free/i

score CUSTOM_FREE_HD                    1

describe CUSTOM_FREE_HD                 Contains the word 'free'.

 

header CUSTOM_FROM                      From =~ /(hotmail\.com|yahoo\.com)/

score CUSTOM_FROM                       .1

describe CUSTOM_FROM                    Message is from yahoo or hotmail.

 

body CUSTOM_RECIEVED                    /you received this (e|e-)mail/i

score CUSTOM_RECIEVED                   1

describe CUSTOM_RECIEVED                Contains 'you recieved this email'

 

body CUSTOM_OPT                         /href.*opt(-in|-out|in|out)/i

score CUSTOM_OPT                        3

describe CUSTOM_OPT                     Contains an opt in or opt out URL

 

body CUSTOM_OFFER                       /(offer expires|see full offer for details|great offer)/i

score CUSTOM_OFFER                      1

describe CUSTOM_OFFER                   Trying to offer you something

 

body CUSTOM_CREDIT                      /subject to credit approval/i

score CUSTOM_CREDIT                     1

describe CUSTOM_CREDIT                  Contains 'subject to credit approval'

 

body CUSTOM_UNSUBSCRIBE                 /to unsubscribe/i

score CUSTOM_UNSUBSCRIBE                1

describe CUSTOM_UNSUBSCRIBE             Contains option to unsubscribe, sounds spammy.

 

body CUSTOM_EXCUSE1                     /this is not spam/i

score CUSTOM_EXCUSE1                    1

describe CUSTOM_EXCUSE1                 Claims it isn't spam, so it must be.

Reply via email to