I have been testing Kami's Nigerian filter and found that in 3 days it flagged 56 email and only caught out of 5 nigerian scam emails.
I do not see this as a fault of Kami's effort but a fault of filtering. Some of the line are very common in ligitimate email. I even lowered all the weights to match our weighting scores. We will not be using it. Once I did that then the nigerian scam email did not get enough weight to be flagged properly. For the effort it is not worth the results, in my opinion. Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Friday, January 23, 2004 7:59 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] "Nigerian" Filter Creator Helper > > > > Why not use Kami's Nigerian Filter? He's done all of the work for > > you. Just remember to thank him. > > That sounds interesting, how about a pointer to Kami's site/email/etc.? > (Or am I just too far out of it and missed the obvious location > somehwere...?) > > Thanks, and in advance, thanks to Kami and everyone who has > created a filter which I might ever use or use for inspiration. > > Jeff > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser > > > Sent: Wednesday, December 31, 2003 12:15 PM To: > > > [EMAIL PROTECTED] Subject: [Declude.JunkMail] "Nigerian" > > > Filter Creator Helper > > > > > > > > > Hello, All, > > > I'm looking for a type of utility that either specifically > > > was written to do > > > what I describe below or a utility which is a broad-based text > > > massaging/manipulation utility which could be twisted to do > > > the following. > > > > > > I would like a utility that I could feed the bodies of > > > nigerian scam letters > > > into and it would basically create a list of all phrases of > > > world length X > > > to Y where X and Y are both numbers. It would capture > > > information from each > > > scam letter that I feed in and would generate an ordered list > > > of each time > > > the X to Y word length phrase appears in each letter. > > > > > > So, for example, if my X and Y were 3 and 5 it would generate > > > a list of all > > > 3 word, 4 word and 5 word phrases found in each message. > > > Then it would add > > > 1 to the tally of each time this phrase is found in any given unique > > > nigerian scam letter. After I submit a certain letters, e.g. 20 > > > (?), I would have a list of very commonly found phrases in Nigerian > > > scam letters. I could then create a custom filter for DJM based on > > > those phrases. > > > > > > Ultimately my filter might look something like... > > > > > > # JunkMail.Filter.Nigerian.txt > > > > > > BODY 10 CONTAINS Nigerian Federal Ministry > > > BODY 10 CONTAINS prayed for ALLAHS devine mercies > > > BODY 10 CONTAINS shores of Nigeria > > > BODY 10 CONTAINS we solicit for your > > > > > > I was hoping that their might be a small utility that some of > > > the Nigerian > > > scam fighting organizations had released to generate keyphrase > > > lists. > > > > > > Does this sound like a decent idea? Are there any good > > > utilities to do > > > this? Or is this something I'd have to write myself? Would it be > > > prohibitively complicated to write a program like this for a person > > > who hasn't done much programming? Or is this pretty > > > straightforward? > > > > > > Thanks In Advance, > > > Dan > > > > > > -------------------------------------------------------------- > > > --------- > > > Sign up for virus-free and spam-free e-mail with Nexus > > > Technology Group > > > http://www.nexustechgroup.com/mailscan > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
