-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Anyone spot the deliberate mistake? :-(
Craig. - This time with the attachment.
- ---- Dear list, I've got a few local rules which I use to supplement the basic SA installation (3.0.2), but I don't really have a sizeable ham/spam corpus to test them against. Also, I'm aware that there will likely be some cross-over with the SARE ruleset, which I'm not using at the moment. So I've attached the .cf for anyone who's interested, please feel free to use it however you see fit. I'd be grateful for any suggestions to reduce FP's, masscheck results, or suggestions for better places to submit these rules :-) .
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFCXTWcMDDagS2VwJ4RApzQAJ9vIxtyKXCakRHImwTLEGTQFXb0YQCfdN6O 5sN39DGghqY9X51uv3eCdvo= =abd4 -----END PGP SIGNATURE-----
# Local rules for 419-like messages # ########################################################################### #
body LOCAL_419_DEPOSIT /\b(?:a|th(?:e|is)) deposit was made\b/i describe LOCAL_419_DEPOSIT A deposit was made body LOCAL_419_DEPOSIT_2 /\bmade a deposit\b/i describe LOCAL_419_DEPOSIT_2 A deposit was made body LOCAL_419_DOCUMENTS /\ball (?:relev(?:a|e)nt|nec?ces?s(?:a|e)ry) documents?\b/i describe LOCAL_419_DOCUMENTS All relevant or necessary documents body LOCAL_419_SURPRISE /\b(?:e?(?:-|.)mail|message|letter)? (?:(?:may|must|might|will|be)(?: \w+)? com(?:e|ing) to you as|will be) a (?:\w+ )?sur?prise\b/i describe LOCAL_419_SURPRISE A surprise mail, how nice! body LOCAL_419_INTRODUCE /\bintroduce myself\b/i describe LOCAL_419_INTRODUCE Why would you need to introduce yourself? body LOCAL_419_REPS /\b(?:searching|looking) for (?:a )?representatives?\b/i describe LOCAL_419_REPS Looking for representative body LOCAL_419_BUSMEN /\bgroup of businessmen\b/i describe LOCAL_419_BUSMEN A group of businessmen body LOCAL_419_PAYME /\b(?:we|that|they) will pay you\b/i describe LOCAL_419_PAYME Show me the money! body LOCAL_419_LUCKY /\blucky (?:international) recipients?\b/i describe LOCAL_419_LUCKY Lucky recipient body LOCAL_419_ACCOUNT /\bbank account\b/i describe LOCAL_419_ACCOUNT Mentions Bank Account body LOCAL_419_STERLING /\bpounds sterling\b/i describe LOCAL_419_STERLING Mentions Pounds sterling body LOCAL_419_RELIABLE /\bI (?:am in )?need (?:of )?a (?:(?:trustworthy|reliable) and )?(?:trustworthy|reliable) person\b/i describe LOCAL_419_RELIABLE Needs a reliable or trustworthy person body LOCAL_419_DONTKNOW /\b(?:don\'t|dont|(?:did |do )?not) know (?:ourselves|each other|me)\b/i describe LOCAL_419_DONTKNOW You don't know me, but... body LOCAL_419_TRUNKBOX /\btrunk box(?:s|es)?\b/i describe LOCAL_419_TRUNKBOX Mentions a trunk box. body LOCAL_419_PRIV_EMAIL /\bprivate e?mail ad?dres?s/i describe LOCAL_419_PRIV_EMAIL Mentions a private email address. body LOCAL_419_TRANSFER /tran?s?fer (?:of )?(?:th[oei]se? |my |some |said )?funds?/i describe LOCAL_419_TRANSFER Mentions a transfer of funds # Local scores score LOCAL_419_DEPOSIT 1.5 score LOCAL_419_DEPOSIT_2 1.5 score LOCAL_419_DOCUMENTS 1.5 score LOCAL_419_SURPRISE 1.5 score LOCAL_419_INTRODUCE 2.0 score LOCAL_419_REPS 0.4 score LOCAL_419_BUSMEN 0.3 score LOCAL_419_PAYME 0.5 score LOCAL_419_LUCKY 0.8 score LOCAL_419_ACCOUNT 0.8 score LOCAL_419_STERLING 0.7 score LOCAL_419_RELIABLE 0.9 score LOCAL_419_DONTKNOW 0.9 score LOCAL_419_TRUNKBOX 0.6 score LOCAL_419_PRIV_EMAIL 0.4 score LOCAL_419_TRANSFER 0.5
