I have a filter posted on my Declude site for 419's and another for lottery's. They use the MINWEIGHTTOFAIL option requiring 4 lines to match to get credit.
It is very CPU intensive... It also uses several other tests as indicators (upper case subject), mailfrom free or web mail, so it uses: an ip4r, an rhsbl, an external test and 4 different filters. It pretty effective. The minweighttofail really mitigates false positives. I see maybe 3 or 4 419s that slide through. http://it.farmprogress.com/declude/Multiline.htm ----- Original Message ----- From: "John Carter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 22, 2004 8:23 AM Subject: [Declude.JunkMail] Scam letter filter > I've been looking at the archives about the N*i*g*e*r*i*a*n letter filters > and saw a lot of discussion back in January, but couldn't tell what people > concluded would be the best filter for this. Does anyone have anything to > share? (Prefer a Declude only solution as I don't have SpamAssassin.) > > Thanks, > John > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
