> -----Original Message-----
> From: Christopher X. Candreva [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, November 25, 2003 11:38 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Nigerian-type scores 0.00
>
>
>
> Wow -- here's a Nigerian type spam that scored 0.00 . I've
> just submit it to
> DCC and leared in my bayes. Posted here if anyone wants to
> add to rulesets.
>
> -Chris
>
Custom rules are your friend. These Nigerian rules haven't been touched in
months:
X-Spam-Status: Yes, hits=6.7 required=5.0
tests=AWL,FOREIGN,FVGT_b_LIKENIGERIA,FVGT_b_NIGERIAN1,
L_b_LikeNigeria,MY_AFRICAN,MY_NIGERIAN3,NO_REAL_NAME,
SPAM_PHRASE_05_08,SUPERLONG_LINE,US_DOLLARS_2
version=2.43
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.43 (1.115.2.20-2002-10-15-exp)
X-Spam-Report: 6.70 hits, 5 required;
* 1.3 -- From: does not include a real name
* 1.5 -- BODY: We don't do business with africa!
* 1.5 -- BODY: Another country often used in Nigeria spam/scam(RM)
* 1.5 -- BODY: FVGT - another country often used in Nigeria spam/scam
* 0.8 -- BODY: Even MORE Nigerian scam phrases
* 0.5 -- BODY: FVGT - possible nigerian type scam(1)
* 0.1 -- BODY: Nigerian scam key phrase ($NNN.N m/USDNNN.N m/US$NN.N m)
* 0.1 -- BODY: (LOCAL RULE) Mentions foreign(er)
* 1.6 -- BODY: Spam phrases score is 05 to 08 (medium)
[score: 7]
* 0.0 -- BODY: Contains a line >=199 characters long
* -2.2 -- AWL: Auto-whitelist adjustment
-2.2 was because of the account I sent this to myself from. Also ignore the
1.3 From: Does not include a real name :)
SO thie email, with just the text and no headers would score a 7.6! Not to
shabby :)
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
"A little nonsense now and then, is relished by the wisest men." - Willy
Wonka
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
