Re: [Declude.JunkMail] Habeas Porn

[Matt]

If you include Habeas as a weighted test in declude, you can actually write a combo filter for this stuff in Declude 1.78 that adds weight for forging the headers.  Get ready for the convoluted stuff :) ----- Global.cfg ----- HABEAS-PRE           habeas           x    x    0    0 HABEAS               filter           C:\IMail\Declude\Filters\Habeas.txt               x    0    0 CANTBEINHABEAS       filter           C:\IMail\Declude\Filters\CantBeInHabeas.txt       x    0    0 HABEASOFFENDER       filter           C:\IMail\Declude\Filters\HabeasOffender.txt       x    0    0 ----- Habeas.txt ----- TESTSFAILED      0        CONTAINS      HABEAS-PRE ----- CantBeInHabeas.txt ----- TESTSFAILED      0        CONTAINS      XBL TESTSFAILED      0        CONTAINS      SBL TESTSFAILED      0        CONTAINS      MAILPOLICE-PORN TESTSFAILED      0        CONTAINS      DNSRBL-DUL TESTSFAILED      0        CONTAINS      DUINV-DUL TESTSFAILED      0        CONTAINS      DULRU-DUL TESTSFAILED      0        CONTAINS      KROPKA-DUL TESTSFAILED      0        CONTAINS      LNSG-DUL TESTSFAILED      0        CONTAINS      NJABL-DUL TESTSFAILED      0        CONTAINS      NJABL-DYNA TESTSFAILED      0        CONTAINS      PDL-DUL TESTSFAILED      0        CONTAINS      SORBS-DUL TESTSFAILED      0        CONTAINS      SNIFFER-GENERAL TESTSFAILED      0        CONTAINS      SNIFFER-CASINO TESTSFAILED      0        CONTAINS      SNIFFER-PORN TESTSFAILED      0        CONTAINS      SNIFFER-PHARMACY TESTSFAILED      0        CONTAINS      SNIFFER-MEDIA TESTSFAILED      0        CONTAINS      SNIFFER-AVSOFT TESTSFAILED      0        CONTAINS      SNIFFER-INSURANCE TESTSFAILED      0        CONTAINS      SNIFFER-TRAVEL (etc..., but only tests that you feel could never occur with a legitimate Habeas sender) ----- HabeasOffender.txt ----- TESTSFAILED      10       CONTAINS      HABEAS CANTBEINHABEAS Note that the HABEAS and CANTBEINHABEAS filters have to appear in the exact order and next to each other in your Global.cfg for this to work.  When NOTCONTAINS functionality is introduced, this filter becomes much, much easier to write and only requires one custom filter file. Matt Bill Landry wrote: I wouldn't think so, since there are still lots of legit users of the Habeas headers that would be penalized if you were to do that. I would recommend simply not weighting the Habeas headers at all rather than adding weight for having them. Bill ----- Original Message ----- From: "Madscientist" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 27, 2004 2:05 PM Subject: RE: [Declude.JunkMail] Habeas Porn At 04:41 PM 2/27/2004, you wrote: Today's related counts: My own Habeas filter: 17 HIL: 258 Number of my Habeas filters tripped that were in HIL: 1 Number of my Habeas filters tripped on my porn filter: 9 You know - it's probably crossed a mind or two - but it needs to be said. Is it now time to use the Habeas test as a weighted indicator for spam? _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================