On Sun, 11 Mar 2012, dar...@chaosreigns.com wrote:
The software used to generate the sought rules, or perhaps an old version of it, is in the spamassassin source tree. You can feed it a folder of known non-spams, and a folder of known spams, and it'll auto-generate rules that hit the spams but not the non-spams.
I've been collecting phish spams for quite a while looking to do something for phishing similar to the ADVANCE_FEE GA-evolved rules, I've just never gotten the round tuits.
If you do start doing sought_phish I'd be more than happy to contribute my corpus and continue to keep it fresh.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Failure to plan ahead on someone else's part does not constitute an emergency on my part. -- David W. Barts in a.s.r ----------------------------------------------------------------------- Today: Daylight Saving Time begins in U.S. - Spring Forward
