On Fri, 06 Jun 2003 16:53:04 -0500, "David W. Tamkin"
<dattier(_at_)panix(_dot_)com> wrote:
The volume of 419 spam I'm getting has suddenly skyrocketed, and I'm
sick of deleting it manually. Does anyone have a good way for procmail
to spot it? Wordings vary, and some versions are rife with misspellings.
Just make sure you filter against the body of the message certain common
keywords and phrases such email scams use.
Here is a sample of some of those words that I have in my procmailrc,
catches almost all of them so far (watch for line wraps that may it up),
and simply include them in your body keyword filtering.
Something like
# Nigerian email scams and the like.
:0
* B ?? ()\/(National Electric Power Authority|Million.*dollars|PRESUME
THIS E?MAIL|\
(confidential|business) proposal|solicit your confidence|MAKALENI|\
(Bank|Federal Government|Federal Republic) of Nigeria|Nigeria Chamber of
Commerce|\
Republic of Congo|Business Partnership|AFRICAN DEVELOPMENT BANK|\
South African Export|NIGERIA(N)? NATIONAL PETROL(L)?EUM CORPORATION|\
Bongo|Mugabe|Matongo|Mboyo|Kargbo|YERIMA|\
Morgado|Savimbi|Matila|Mapongo|Abacha|MULETE|DIOBU)
{
LOG="Bodyspam: $MATCH $NL"
LOGABSTRACT=ALL
:0:
SPAM
LOGABSTRACT=NO
}
I think this page has a good documentation of samples and message
contents of such scams, along with additional names and keywords that
you might want to consider checking against.
http://easyweb.easynet.co.uk/~gcaselton/spam/nigerian.html
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail