procmail
[Top] [All Lists]

How to filter "challenges"?

2003-12-06 16:43:15
Hi all -

I'd like to classify and discard "challenge" messages sometimes received
in response to my email. An example of these messages is appended below.
Since these messages come from a variety of sources they seem difficult
to classify. Does anyone have a method for detecting these "challenges" or
suggestions on making the recipe below more comprehensive?

:0
* ^Subject: Re:
{
        :0
        * From: SpamLion@
        { STATUS = challenge }

        :0
        * B ?? http://
        * B ?? \<(click|URL|link)\>
        * B ?? \<(anti(-)?spam|Registration|spam guard(ing)?)\>
        * B ?? at [a-Z]+@([0-9]|[a-Z])+\.[a-Z][a-Z][a-Z]
        { STATUS = challenge }
}

To explain the recipe, many challenges seem to involve (not unlike spam) a URL
and directions on loading it. Many of them also contain the email address of
the guarded recipient and a phrase like "antispam" or "spam guard". (The recipe
above would of course be applied after conventional spam-filtering and
greenlisting.)

Thanks!

James


 --
 From: AntiSpam UOL <ms_diniz(_dot_)sspam(_at_)uol(_dot_)com(_dot_)br> 

 Hi,

 You've just sent a message to ms_diniz(_at_)uol(_dot_)com(_dot_)br
 In order to confirm the sent message, please click here

 This confirmation is necessary because ms_diniz(_at_)uol(_dot_)com(_dot_)br 
uses Antispam UOL,
 a service that avoids unwanted messages like advertising, pornography, viruses,
 and spams.

 Other messages sent to ms_diniz(_at_)uol(_dot_)com(_dot_)br won't need to be 
confirmed*.

 *If you receive another confirmation request, please ask 
ms_diniz(_at_)uol(_dot_)com(_dot_)br
 to include you in his/her authorized e-mail list.

 Warning! If the link doesn't work, please copy the address below and paste it
 on your browser:

 http://tira-teima.as.uol.com.br/challengeSender.html?data=5Sxax14faST8ZQtEQ3RR
 kUM9u5bYJtOZFiG1zoXHvQqh%2FD%2FMtCuJjP3RHZjULs%2BNvMgyPzWjMbOx%0AQ4AQBo4qigWic
 cMS4g6CfVXGYc%2FZ%2FxbKilsDGE%2BdIfwQI8U9blHkfT22Ag%2BxOqRcNhnt2%2FXsD%2BVa%0A
 ORIWvg02FF%2FZI0ciUlQnJRnHGL6xLRLjM2meyI6V

 Use AntiSpam UOL

_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>