Thanks for the response. We are
already using Sniffer; if a message triggers Sniffer we give the e-mail
60% of our delete weight. This works great, trust me... but I'm sick
and tired of seeing w^^o_r-d#s l-!+k^e this in my hold queue.
The problem is, how many ways
can you spell a word? How many ^,*,$,#, and other characters can you
put into a word to slip by Sniffer? Apparently there are 360,000 to
spell Viagra by inserting these characters (and others) and changing
certain letters to numbers.
I'm frustrated by spammers, I
know we all are so I'm just trying to find out if this is *even* a
viable way to help declude stop spam.
Thanks
There are 600,426,974,379,824,381,952 ways to spell viagra. How many
bad words do you wish to target?
http://tinyurl.com/2dgoq
BTW, it appears that some of the spammers have gone legit to advertise
on this page.
RegEx is the only way to tag that stuff, and Declude has no native
RegEx capabilities. This wouldn't be a set it and forget it type of
config either as there would be exceptions and other things that would
need monitoring, and of course where would you stop?
It's not worth the effort to go tagging so many words or phrases like
this, spammers are generally sophisticated enough to still get stuff
through. I recommend that you just pay Sniffer a little money and use
this in combination with Declude to enhance your block rates if this
stuff is still getting through. Sniffer primarily populates from
spamtraps, and this stuff almost always hits spamtraps and therefore
most of it will get hit by Sniffer.
On our system, over 90% of the spam that leaks through is from static
spammers who don't use any of these methods, primarily because the
zombie spammers generally leave many different taggable patterns
behind, plus of course Sniffer.
Matt
Aaron Moreau-Cook wrote:
We
are currently debating putting a 300,000 line filter file into our
production environment. This filter file would have many different
variations of certain "bad" words, words we all see everyday in our
spam hold files. This test would specifically be a BODY test.
Examples
would be:
B-L-A-H
B*L*A*H
B^LA-H
B^L~A*H
etc....
Our
system is a Dual 3.06 GHz server currently running 10% utilization. We
process about 50,000 messages a day.
Has
anyone else put this large of a filter file into place? Any thoughts?
Thanks,
Aaron
--
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================
