[SAde] Wie filtert man solche Mails am Besten heraus?

[email protected] Sun, 12 Oct 2003 17:47:46 +0200 (CEST)
Newsgroups gmane.mail.spam.spamassassin.devel.de
Message-ID <[email protected]>
Hallo,

danke für die Anregungen.

Ich habe nun folgende Regeln erstellt (ich hoffe, sie sind korrekt):

# Known SPAM Relays in Korea.
# They change their hostnames weekly but IP is always the same.
# The known relay names: horfinc.com, j-connect.com, netscapw.com,
zednet.com, name-harris.com.....

header	DL_f_NETSCAPWIP		From =~ /211\.36\.56\./
score 	DL_f_NETSCAPWIP		5.0
describe	DL_f_NETSCAPWIP		SPAM-RELAY IP Netscapw

header	DL_f_HORFINCIP		From =~ /61\.252\.159\./
score 	DL_f_HORFINCIP		5.0
describe	DL_f_HORFINCIP		SPAM-RELAY IP HORFINC

# If one of these IP's are changed then try to filter through the name
of the relay
# Lower score because filtering by name is not so effective.

header	DL_f_SPAMRELAY		From =~ /from
\.(horfinc|netscapw|j-connect|name-harris)\.com/i
score 	DL_f_SPAMRELAY		1.2
describe	DL_f_SPAMRELAY		Received through known SPAM RELAY

body	DL_b_FOUNDON		/found on (msn|yahoo)/i
score	DL_b_FOUNDON		1.2
describe	DL_b_FOUNDON		Used found on

body	DL_b_TAKEAWAY		/take me away/i
score	DL_b_TAKEAWAY		1.2
describe	DL_b_TAKEAWAY		Used take me away

body	DL_b_GOFORIT		/go for it/i
score	DL_b_GOFORIT		1.2
describe	DL_b_GOFORIT		Used go for it

body	DL_b_PLAINWRONG		/plain wrong people/i
score	DL_b_PLAINWRONG		1.2
describe	DL_b_PLAINWRONG		Used plain wrong people

uri	DL_u_TAIWANESE		/\.taiwanesewoman\.com/i
score	DL_u_TAIWANESE		10.0
describe	DL_u_TAIWANESE		Used TAIWANESE_WOMEN

Daniel

-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php