Ok, I just did another update. I took the spamtrap for the last 15 days and
got this down to 944 rules. This should be much better and fresher. I also
edited the reg2rule.pl script to include the trailing 'i' so case doesn't
matter anymore. I also saved it in UNIX format! 

The only things that you may want to change are the following domains, they
are "OPT-IN" but we don't want them here:
weatherbug.com
winelibrary.com
rent.com

Everything else should be pure spam. 

OH! Are friend is at it again. So I wrote some quick rules just now that I'm
about to implement. I just typed them and haven't tested for typos, but here
they are. Have fun ;)

rawbody MY_KIEV /kiev(school|online)/i
describe MY_KIEV Hopeless spammer
score MY_KIEV 4.0

header MY_KIEV_FROM From =~ /moshe|koldny/i
describe MY_KIEV_FROM Hopless spammer sent this.
score MY_KIEV_FROM 2.0

header MY_MESSAGEID_KIEV Message-ID =~ /[EMAIL PROTECTED]>/
describe MY_MESSAGEID_KIEV Hopless spammer message ID
score MY_MESSAGEID_KIEV 1.0

Chris Santerre 
System Admin and SA Custom Rules Emporium keeper 
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm 
"A little nonsense now and then, is relished by the wisest men." - Willy
Wonka 


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to