Great Circle Associates List-Managers
(February 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Pattern matching for SPAM
From: srb @ cuci . nl (Stephen R. van den Berg)
Date: Mon, 5 Feb 1996 01:07:09 +0100
To: list-managers @ greatcircle . com
In-reply-to: "Eric J. Hansen"'s message as of 1996 Feb 4 Sun 18:38. <199602042338.SAA11653@worldmachine.com>

"Eric J. Hansen" <eric@worldmachine.com> wrote:
>two of my lists have now been hit with the same free magazine SPAM message
>three times.  For reference, two of the subject headers were:

Actually, the procmail and SmartList mailinglists (both maintained by me)
have been hit by this spam about every two weeks since September.

After the first two hits, I installed a very crude filter which does an
ad hoc match for this exact spam.  Has caught it every time since, even
though the content changed a little over time as well.

>getting forwarded.  A possibly successful mechanism for filtering this crud
>would be to run a multiple pattern match on all incoming messages and bounce
>ones which have a high number of matches (i.e., run an egrep-like program on
>twenty or so unique or uncommon words that appear in the message).

As a matter of fact, I'm currently in the mail-spam collector market.
In order to pick up a representative sample against which a generic spam
filter can be tested.

>Note that my suggestion here is based on the fact that I've received the
>*same* SPAM several times (from different senders, though).  This mailing
>list (list-managers) could periodically post a list of patterns to filter
>known SPAM -- kind of like a virus detection program update.

That would never work for one-shot spams.
-- 
Sincerely,                                                          srb@cuci.nl
           Stephen R. van den Berg (AKA BuGless).

"And now for something *completely* different!"


References:
Indexed By Date Previous: Pattern matching for SPAM
From: "Eric J. Hansen" <eric@worldmachine.com>
Next: Re: Pattern matching for SPAM
From: Jerry Peek <jpeek@netcom.com>
Indexed By Thread Previous: Pattern matching for SPAM
From: "Eric J. Hansen" <eric@worldmachine.com>
Next: Re: Pattern matching for SPAM
From: Jerry Peek <jpeek@netcom.com>

Google
 
Search Internet Search www.greatcircle.com