I use the "fromfile" test that was suggested by Tom on this list, which adds a weighting for many common items in Spam addresses such as these below:
@ANONYMOUS @ANONYMOUS .ANONYMOUS .ANONYMOUS ANONYMOUS. ANONYMOUS. ANONYMOUS@ ANONYMOUS@ -ANONYMOUS -ANONYMOUS ANONYMOUS- ANONYMOUS- @BOUNCE @BOUNCE .BOUNCE .BOUNCE BOUNCE. BOUNCE. BOUNCE@ BOUNCE@ -BOUNCE -BOUNCE BOUNCE- BOUNCE- I use several combinations like this, but I am noticing that the ones which end with the "@" symbol are not working. Any ideas why? Here is an example of one it missed from the logs... 09/27/2002 00:12:29 Qdaac06290108404a BADHEADERS:5 SNIFFER:12 . Total weight = 17 09/27/2002 00:12:29 Qdaac06290108404a Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8010000e].). 09/27/2002 00:12:29 Qdaac06290108404a Msg failed SNIFFER (Message failed SNIFFER: 12.). 09/27/2002 00:12:29 Qdaac06290108404a Msg failed WEIGHTFAIL (Weight of 17 reaches or exceeds the limit of 15.). 09/27/2002 00:12:29 Qdaac06290108404a Subject: Double Your Earnings Power... 09/27/2002 00:12:29 Qdaac06290108404a From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] ...other than that problem, this test has made a great addition by just adding a small weighting for addresses that contain these patterns. Thanks, Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
