Re: [Declude.JunkMail] "Nigerian" Filter Creator Helper

[Matt]

Yes.  I also have it very near the bottom of my list because it has a lot of body searches, and it rarely gets hit.  Even so, setting SKIPIFWEIGHT to 28 while holding at 10 and deleting at 25 means that my best custom filter tops out at 3% of total mail volume.  Even GIBBERISH only gets hit 1.21% of the time, however without SKIPIFWEIGHT and proper ordering, it would probably do over 5 times that amount.  Here's some stats, but note that SNIFFER was a trial version for this period and would have scored much higher.  My weight tests are as follows:    HIGH-MAILPURE - Scored between 10 and 24 and was held.    MED-MAILPURE - Scored between 13 and 24 and was held.    LOW-MAILPURE - Scored between 16 and 24 and was held.    DELETE - Scored 25+ and was deleted. Matt TEST                   # FAILED   Percentage NOLEGITCONTENT...........22,816.......86.96% DELETE...................21,592.......82.30% IPNOTINMX................21,551.......82.14% SPAMCOP(ALL).............17,664.......67.33% SPAMCOP(DYNA)............17,281.......65.87% SNIFFER-GENERAL..........15,120.......57.63% CMDSPACE.................13,911.......53.02% MAILPOLICE-BULK..........10,104.......38.51% DSBL(ALL).................9,606.......36.61% DSBL(DYNA)................9,520.......36.29% SBL.......................8,716.......33.22% XBL(ALL)..................8,422.......32.10% XBL(DYNA).................8,259.......31.48% FIVETEN-SPAM(ALL).........7,522.......28.67% FIVETEN-SPAM(DYNA)........7,270.......27.71% SORBS-DUL.................6,471.......24.66% NJABL-DYNA................6,297.......24.00% RFC-NOABUSE(DUL)..........6,253.......23.83% AHBL-SOURCES..............5,296.......20.19% BADHEADERS................5,204.......19.84% RFC-NOPOSTMASTER(DUL).....5,008.......19.09% HELOBOGUS.................4,207.......16.04% NJABL-SOURCES.............3,812.......14.53% NJABL-PROXIES(ALL)........3,582.......13.65% NJABL-PROXIES(DYNA).......3,435.......13.09% SORBS-SPAM(ALL)...........3,191.......12.16% SORBS-SPAM(DYNA)..........3,152.......12.01% SPAMDOMAINS...............3,065.......11.68% FIVETEN-SUPPORT...........2,897.......11.04% SORBS-SOCKS(ALL)..........2,750.......10.48% SORBS-SOCKS(DYNA).........2,650.......10.10% ROUTING...................2,645.......10.08% SORBS-HTTP(ALL)...........2,504........9.54% SORBS-HTTP(DYNA)..........2,410........9.19% BRAMBSTER.................2,399........9.14% AHBL-PROXIES(ALL).........2,370........9.03% AHBL-PROXIES(DYNA)........2,292........8.74% RFC-DSN(DUL)..............2,080........7.93% CONCEALED.................1,817........6.93% SPAMHEADERS...............1,386........5.28% BASE64....................1,287........4.91% SPAMINDICATIVE..............971........3.70% NJABL-DUL...................957........3.65% BLITZEDALL(ALL).............956........3.64% BLITZEDALL(DYNA)............876........3.34% MAILFROM....................777........2.96% SUBSPACE-15.................697........2.66% FIVETEN-BULK................614........2.34% HIGH-MAILPURE...............612........2.33% PSEUDO-WHITE................565........2.15% SBBL(ALL)...................543........2.07% SBBL(DYNA)..................540........2.06% SOLID(ALL)..................526........2.00% RFC-BOGUSMX(DUL)............502........1.91% MED-MAILPURE................495........1.89% DYNAMIC.....................473........1.80% SOLID(DYNA).................426........1.62% SUBSPACE-25.................416........1.59% LOW-MAILPURE................410........1.56% FORGEDHTML..................403........1.54% ATTACHMENT..................380........1.45% COMMMENTS...................335........1.28% KAMI-COMBINED...............332........1.27% GIBBERISH...................317........1.21% FOREIGN.....................252........0.96% SUBSPACE-40.................251........0.96% WORDFILTER-BODY.............236........0.90% SNIFFER-MALWARE.............235........0.90% NJABL-RELAYS(ALL)...........220........0.84% BADCOUNTRYNOREVDNS..........216........0.82% NJABL-RELAYS(DYNA)..........215........0.82% BOUNCED.....................198........0.75% SPAMPOSITIVE................180........0.69% SORBS-MISC(ALL).............177........0.67% WORDFILTER-SUBJECT..........171........0.65% MAILPOLICE-PORN.............163........0.62% SORBS-MISC(DYNA)............161........0.61% ORDB(ALL)...................159........0.61% ORDB(DYNA)..................137........0.52% BASE64SUB...................124........0.47% IPLINKED....................110........0.42% DEADMAIL.....................92........0.35% PUBLICADDRESS................89........0.34% PSEUDO-BLACK.................76........0.29% GIBBERISHSUB.................62........0.24% NONENGLISH...................50........0.19% @LINKED......................35........0.13% FORGEDHELO-IP................35........0.13% TLD-WESTERNEUROPEAN..........35........0.13% WORDFILTER-MAILFROM..........35........0.13% FORGEDFROM...................34........0.13% ORDB-MODULE(DYNA)............33........0.13% ANTIVIRUS....................26........0.10% OBFUSCATION..................26........0.10% TLD-ASIAN....................24........0.09% TLD-EASTERNEUROPEAN..........21........0.08% Y!DIRECTED...................20........0.08% FIVETEN-MISC(ALL)............16........0.06% FIVETEN-MISC(DYNA)...........16........0.06% PHISHING.....................16........0.06% SORBS-SMTP(ALL)..............13........0.05% SORBS-SMTP(DYNA).............12........0.05% BONDEDSENDER(DUL)............11........0.04% TLD-SOUTHAMERICAN.............9........0.03% FIVETEN-MULTI(ALL)............5........0.02% FRAUDDOMAINS..................5........0.02% FIVETEN-MULTI(DYNA)...........4........0.02% SORBS-WEB(DUL)................4........0.02% ADDRESSSUB....................3........0.01% ALLOWEDIP.....................2........0.01% SORBS-ZOMBIE..................2........0.01% FORGEDHELO-FQDN...............1........0.00% NJABL-FORMMAIL(DUL)...........1........0.00% TLD-AFRICAN...................1........0.00% TLD-CARIBBEAN.................1........0.00% TLD-CENTRALAMERICAN...........1........0.00% TLD-OCEANIC...................1........0.00% WORDFILTER-ANYWHERE...........1........0.00% ZAPTHEDINGBAT.................1........0.00% Dave Doherty wrote: Matt,   > this filter won't get run unless an E-mail gets past almost everything else with a score less than 28 on my system   How are you accomplishing that? Are you uising SKIPIFWEIGHT on the filter?   -Dave   -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================