Re: [Declude.JunkMail] Stock Spam

Fri, 03 Feb 2006 09:49:55 -0800

Title: Message
A dk.geocities.com link would trigger on your first line getting 75 points.
In my case I would want it to trigger for 100 points.
----- Original Message -----
Sent: Friday, February 03, 2006 11:27 AM
Subject: RE: [Declude.JunkMail] Stock Spam

Would this get the same result as below ?
 
STOPATFIRSTHIT
 
BODY  75 CONTAINS geocities.com
BODY  75 CONTAINS geocities.yahoo.com
 
BODY  100 CONTAINS geocities.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Scott Fisher
Sent: Thursday, February 02, 2006 11:46 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Stock Spam

Here's my geocities filter. It's a little more specific so I can weight foreign geocities more than US geocities.
 
STOPATFIRSTHIT
 
BODY  100 CONTAINS ar.geocities.com
BODY  100 CONTAINS geocities.com.ar
BODY  100 CONTAINS ar.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.ar
 
BODY  100 CONTAINS asia.geocities.com
BODY  100 CONTAINS asia.geocities.yahoo.com
 
BODY  100 CONTAINS au.geocities.com
BODY  100 CONTAINS geocities.com.au
BODY  100 CONTAINS au.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.au
 
BODY  100 CONTAINS br.geocities.com
BODY  100 CONTAINS geocities.com.br
BODY  100 CONTAINS br.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.br
 
BODY  100 CONTAINS ca.geocities.com
BODY  100 CONTAINS geocities.ca
BODY  100 CONTAINS ca.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.ca
 
BODY  100 CONTAINS cf.geocities.com
BODY  100 CONTAINS cf.geocities.yahoo.com
 
BODY  100 CONTAINS cn.geocities.com
BODY  100 CONTAINS geocities.cn
BODY  100 CONTAINS cn.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.cn
 
BODY  100 CONTAINS de.geocities.com
BODY  100 CONTAINS geocities.de
BODY  100 CONTAINS de.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.de
 
BODY  100 CONTAINS es.geocities.com
BODY  100 CONTAINS geocities.es
BODY  100 CONTAINS es.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.es
 
BODY  100 CONTAINS espanol.geocities.com
BODY  100 CONTAINS espanol.geocities.yahoo.com
 
BODY  100 CONTAINS hk.geocities.com
BODY  100 CONTAINS geocities.com.hk
BODY  100 CONTAINS geocities.hk
BODY  100 CONTAINS hk.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.hk
BODY  100 CONTAINS geocities.yahoo.hk
 
BODY  100 CONTAINS in.geocities.com
BODY  100 CONTAINS geocities.co.in
BODY  100 CONTAINS in.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.co.in
 
BODY  100 CONTAINS it.geocities.com
BODY  100 CONTAINS geocities.it
BODY  100 CONTAINS it.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.it
 
BODY  100 CONTAINS kr.geocities.com
BODY  100 CONTAINS geocities.co.kr
BODY  100 CONTAINS kr.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.co.kr
 
BODY  100 CONTAINS mx.geocities.com
BODY  100 CONTAINS geocities.com.mx
BODY  100 CONTAINS mx.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.mx
 
BODY  100 CONTAINS sg.geocities.com
BODY  100 CONTAINS geocities.com.sg
BODY  100 CONTAINS sg.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.com.sg
 
BODY  100 CONTAINS uk.geocities.com
BODY  100 CONTAINS geocities.co.uk
BODY  100 CONTAINS uk.geocities.yahoo.com
BODY  100 CONTAINS geocities.yahoo.co.uk
 
BODY  75 CONTAINS geocities.com
BODY  75 CONTAINS geocities.yahoo.com
 

 
----- Original Message -----
Sent: Thursday, February 02, 2006 9:09 AM
Subject: Re: [Declude.JunkMail] Stock Spam

If you're referring to the geocities stuff that's been out the last couple of days, I just use a body filter.
 
BODY 3 CONTAINS au.geocities.com
 
Sniffer, which I weight at 7, picks it up OK, and the added weight of 3 is enough to get to my hold weight of 10.
 
-Dave Doherty
 Skywaves, Inc.
----- Original Message -----
Sent: Thursday, February 02, 2006 9:32 AM
Subject: [Declude.JunkMail] Stock Spam

Anyone have a good filter strategy on the increasing amount of stock spam???
 
Thanks,
 
Mike
 

Reply via email to