Matt, How about your Gibberish Test.
Fred ----- Original Message ----- From: "Matthew Bramble" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, October 22, 2003 10:42 PM Subject: [Declude.JunkMail] Y!DIRECTED v1.0.1 - New filter launched > Here's a new one that I've been testing for the last couple of weeks. > It detects a technique that several spammers are using where they use > Yahoo's redirection capabilities to bounce links off their servers to > the spammer's site. An example of this would be as follows: > > > http://www.yahoo.com/any/directory/*http://www.mailpure.com/software/decludefilters/ > > The page on my site for this filter gives much more detail about how it > works, etc. I would be surprised to see too many more if any > exceptions, so this one should be safe to score near your system's fail > weight, and it will score a reasonable volume of E-mail. There are > unfortunately some counterbalances that will result in marking (but not > scoring) a large number of E-mails in order to protect from potential > sources of false positives, and I have left directions in the filter > files and on the page of my site that explains how you can reduce these > hits by turning off the reply and forward detection while testing the > filter out (but turn them back on for regular use). > > The only place that I expect to see more potential false positives from > is in legit E-mail that includes ads for Yahoo, which are linked back > through Yahoo's redirection capabilities. I believe that I found the > appropriate counterbalance for this, but if you see any FP's from such a > thing, or any other sources, please let me know. > > The filter can be downloaded from the following link: > > MailPure :: Filter Software :: Declude Filters > http://www.mailpure.com/software/decludefilters/ > > Matt > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
