[NTL] (HOWTO) Surprisingly simple Procmail recipe

[William Park]

On Thu, Jun 03, 2004 at 10:51:35PM -0400, William Park wrote:
> I found few simple Procmail recipes that filter out surprisingly large
> percentage of spams that I get.
> 
>     1.  :0
> 	* ^TO_[^@]*@yahoo.ca, [^@]*@yahoo.ca, [^@]*@yahoo.ca,
> 	spam.to
> 
>     Any email sent to 3 or more addresses within <yahoo.ca> domain is
>     spam.
> 
>     2.  :0
> 	* ^TO_yahoo.ca
> 	* ! ^TO_opengeometry-FFYn/CNdgSA at public.gmane.org
> 	spam.to

Minor correction:

    2.	:0
	* ^To:.*@yahoo.ca\>
	* ! ^To:.*\<opengeometry-FFYn/CNdgSA at public.gmane.org\>
	spam.to

    Similiar rule for Cc: headers.  Each To: or Cc: header should be
    tested independently.


Here is my attempt at Nigerian spams:

    4.  :0 BD
	* -9^0
	* 1^0 ()\<Dear (Sir|Sir/Madam|Friend)\>
	* 1^1 ()\<(National|Merchant|Business|Bank|Treasury|Petroleum|Diamond|Mining|Corporation|Company|Ministry)\>
	* 1^1 ()\<(Nigeria|Republic|Senegal|South|Africa|Switzerland|Zimbabwe|Congo|Angola|United|Arab|Emirates|Sierra|Leone|Kenya)\>
	* 1^1 ()\<(US\$[0-9]|Million|(US|U\.S\.) Dollars?)\>
	* 1^1 ()\<(urgent|confidential|assistance|partnership|cooperation|transaction|business|proposition)\>
	* 1^1 ()\<(inheritance|claims|bequest|next of kin|death|deceased|children)\>
	spam.nigerian

    If 10 or more matches are found, then it's spam.


Use at your risk, and enjoy.

-- 
William Park, Open Geometry Consulting, <opengeometry-FFYn/CNdgSA at public.gmane.org>
No, I will not fix your computer!  I'll reformat your harddisk, though.
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml