On Thu, 2 May 2013, Simon Loewenthal wrote:
Hi Martin,
May be you could try something like this, but change
the English text into Norwegian accordingly.
describe J_MAILBOX_FULL
Your mailbox has exceeded spam
body J_MAILBOX_FULL /^Your? ((web|E-?)
?mail|mailbox) .*(is|has) .*(exceed|over)/i
score J_MAILBOX_FULL 1.0
There are already mailbox phishing rules for that sort of thing in my
sandbox. Unfortunately there aren't many spams of that sort in the
masscheck corpus so they aren't "good enough" to be published at this
time.
A general request to the list: if you get such a spam in a language other
than English, I would appreciate getting a copy so that I can add
translations. Please forward to my personal address as an attachment.
Thanks!
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
It is not the business of government to make men virtuous or
religious, or to preserve the fool from the consequences of his own
folly. -- Henry George
-----------------------------------------------------------------------
6 days until the 68th anniversary of VE day
