Has anyone else noticed these messages as a problem? I have had a few
complaints about messages getting through my spam filter involving
"Physicians List in the USA" or something like that usually talking about
dentists too. I made this to target it (someone on the list showed me how to
do things like this which really seems to be helping to block EDU Spear
attacks)

 

body WSC_DENTISTSCAM /Dent ists|Send an email to Slater|Directory in the
United States|have won a prize money|D.entists|Reach Dentists|Physician
Mailing List|receive money|you will have your email taken off|Physicians in
the US|Pharmaceutical Company List|List of US Hospitals|Directory of US
Dentists/i

describe WSC_DENTISTSCAM Dentist scam.

score WSC_DENTISTSCAM 15

body       WSC_DENTIST_D /dentist/i

describe   WSC_DENTIST_D Email Contains dentist

score      WSC_DENTIST_D 0.1

body       WSC_DENTIST_P /physician|MD/i

describe   WSC_DENTIST_P Email contains physician

score      WSC_DENTIST_P 0.1

body       WSC_DENTIST_L /list|directory/i

describe   WSC_DENTIST_L Email contains directory/list

score      WSC_DENTIST_L 0.1

body       WSC_DENTIST_U /United States/i

describe   WSC_DENTIST_U Email contains United States

score      WSC_DENTIST_U 0.1

meta       WSC_DENTIST_1 WSC_DENTIST_D && WSC_DENTIST_P && WSC_DENTIST_L

describe   WSC_DENTIST_1 Likely dentist/physician list spam..contains
physician, dentist, and list or directory

score      WSC_DENTIST_1 7

meta       WSC_DENTIST_2 WSC_DENTIST_D && WSC_DENTIST_P && WSC_DENTIST_L &&
WSC_DENTIST_U

describe   WSC_DENTIST_2 Very Likely dentist/physician list spam

score      WSC_DENTIST_3 10

 

Has anyone else been seeing these types of messages? 

 

Thomas E. Casartello, Jr.

Staff Assistant - Wireless Technician/Linux Administrator

Information Technology

Wilson 105A

Westfield State College

(413) 572-8245

 

Red Hat Certified Technician (RHCT)

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to