"Eric J. Hansen" <firstname.lastname@example.org> wrote:
>two of my lists have now been hit with the same free magazine SPAM message
>three times. For reference, two of the subject headers were:
Actually, the procmail and SmartList mailinglists (both maintained by me)
have been hit by this spam about every two weeks since September.
After the first two hits, I installed a very crude filter which does an
ad hoc match for this exact spam. Has caught it every time since, even
though the content changed a little over time as well.
>getting forwarded. A possibly successful mechanism for filtering this crud
>would be to run a multiple pattern match on all incoming messages and bounce
>ones which have a high number of matches (i.e., run an egrep-like program on
>twenty or so unique or uncommon words that appear in the message).
As a matter of fact, I'm currently in the mail-spam collector market.
In order to pick up a representative sample against which a generic spam
filter can be tested.
>Note that my suggestion here is based on the fact that I've received the
>*same* SPAM several times (from different senders, though). This mailing
>list (list-managers) could periodically post a list of patterns to filter
>known SPAM -- kind of like a virus detection program update.
That would never work for one-shot spams.
Stephen R. van den Berg (AKA BuGless).
"And now for something *completely* different!"