On Mon, 2004-02-23 at 14:44, Scott Harris wrote:
> > 
> > > I have the same problem with these logo spams constantly getting 
> > > through as well.  I've fed about 300 of them into Bayes and 
> > yet they 
> > > still continue to get through.
> > 
> > Then its time to write a custom anti-logo rule.  I've never 
> > seen one myself (perhaps they are regional or some such), but 
> > someone posted one a while back.  That one contained the word 
> > 'logo' at least 9 times, which would have been just a little 
> > unusual in a normal mail.  Especially since it had a site 
> > name that included /logo/ in the name.  It should be pretty 
> > trivial to write a rule to catch something like that.
> > 
> >         Loren
> For anyone that is interested, here are two samples:
> 
> http://download.synthys.com/cheap1.htm
> http://download.synthys.com/cheap2.htm
> 

Based on these two samples, I wrote:

body     STEWART_LOGO_1       /cheap (ready|pre)-made logos/i
describe STEWART_LOGO_1       Logo advert from Stewart
score    STEWART_LOGO_1       0.5

body     STEWART_LOGO_2       /our (logo store|gallery) is the smart
choice/i
describe STEWART_LOGO_2       Logo advert from Stewart
score    STEWART_LOGO_2       0.5

meta     STEWART_LOGO         (STEWART_LOGO_1 && STEWART_LOGO_2)
describe STEWART_LOGO         Logo advert from Stewart
score    STEWART_LOGO         5.0

It's very specific, so it won't continue to work if he changes the
wording, but at the same time it will temporarily stop the logo spam and
shouldn't hit any FP's.  

- Jon

-- 
[EMAIL PROTECTED]

Administrator, tgpsolutions
http://www.tgpsolutions.com

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to