Kevin,
I also have been using Kami's Nigerian stuff, however I modified it a
great deal and removed some of the lines that I felt were too common, I
reduced scores, and capped the score at 80% of my hold weight. The
result is that it only hit 0.06% of my total mail volume across a 3 day
period earlier this week, however this filter won't get run unless an
E-mail gets past almost everything else with a score less than 28 on my
system, which is about 85% on average. I feel that this is working
correctly, and it does score some things that are very hard to catch
with other filters. Sniffer also does a good job with this stuff, so
between the two, I think I'm pretty well protected.
Attached is a copy of Kami's filter that was modified as described
above. I think this may improve your results.
Matt
Kevin Bilbee wrote:
I have been testing Kami's Nigerian filter and found that in 3 days it
flagged 56 email and only caught out of 5 nigerian scam emails.
I do not see this as a fault of Kami's effort but a fault of filtering. Some
of the line are very common in ligitimate email. I even lowered all the
weights to match our weighting scores. We will not be using it. Once I did
that then the nigerian scam email did not get enough weight to be flagged
properly.
For the effort it is not worth the results, in my opinion.
Kevin Bilbee
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, January 23, 2004 7:59 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] "Nigerian" Filter Creator Helper
Why not use Kami's Nigerian Filter? He's done all of the work for
you. Just remember to thank him.
That sounds interesting, how about a pointer to Kami's site/email/etc.?
(Or am I just too far out of it and missed the obvious location
somehwere...?)
Thanks, and in advance, thanks to Kami and everyone who has
created a filter which I might ever use or use for inspiration.
Jeff
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Dan Geiser
Sent: Wednesday, December 31, 2003 12:15 PM To:
[EMAIL PROTECTED] Subject: [Declude.JunkMail] "Nigerian"
Filter Creator Helper
Hello, All,
I'm looking for a type of utility that either specifically
was written to do
what I describe below or a utility which is a broad-based text
massaging/manipulation utility which could be twisted to do
the following.
I would like a utility that I could feed the bodies of
nigerian scam letters
into and it would basically create a list of all phrases of
world length X
to Y where X and Y are both numbers. It would capture
information from each
scam letter that I feed in and would generate an ordered list
of each time
the X to Y word length phrase appears in each letter.
So, for example, if my X and Y were 3 and 5 it would generate
a list of all
3 word, 4 word and 5 word phrases found in each message.
Then it would add
1 to the tally of each time this phrase is found in any given unique
nigerian scam letter. After I submit a certain letters, e.g. 20
(?), I would have a list of very commonly found phrases in Nigerian
scam letters. I could then create a custom filter for DJM based on
those phrases.
Ultimately my filter might look something like...
# JunkMail.Filter.Nigerian.txt
BODY 10 CONTAINS Nigerian Federal Ministry
BODY 10 CONTAINS prayed for ALLAHS devine mercies
BODY 10 CONTAINS shores of Nigeria
BODY 10 CONTAINS we solicit for your
I was hoping that their might be a small utility that some of
the Nigerian
scam fighting organizations had released to generate keyphrase
lists.
Does this sound like a decent idea? Are there any good
utilities to do
this? Or is this something I'd have to write myself? Would it be
prohibitively complicated to write a program like this for a person
who hasn't done much programming? Or is this pretty
straightforward?
Thanks In Advance,
Dan
--------------------------------------------------------------
---------
Sign up for virus-free and spam-free e-mail with Nexus
Technology Group
http://www.nexustechgroup.com/mailscan
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
|
Phishing.zip