On Fri, 30 Sep 2011, Ned Slider wrote:
On 30/09/11 01:41, jida...@jidanni.org wrote:
Sure a lot of "Your mailbox has exceeded" spam these days. I'll use
body J_MAILBOX_FULL /^Your mailbox has exceeded/
score J_MAILBOX_FULL ...
myself for now.
I've seen a few of these, but probably not enough examples to have Bayes
reliably catch them yet - the first few sneaked straight through uncaught.
If we could organise a working group or something, and/or collect some
examples, I'd happily help with writing some rules specifically for these.
I've been collecting phishes for a while now - in several languages - and
I've been intending to start working on some rules, perhaps evolved along
the lines of the ADVANCE FEE rules.
Anyone who wants to send me .tar.gz archives of phish samples is welcome
to do so.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
4 days until the 7th anniversary of SpaceshipOne winning the X-prize
