Archive for December 18, 2003

Thursday, December 18, 2003

Blocklist

There’s a new round of spams that can be hard for SpamSieve to catch if it hasn’t seen many of them before. They have subjects like:

Re: GSF, despite the promise
Re: IOWRGW, the magician disappeared

and, when the spam-generating software doesn’t work properly:

Re: %RND_UC_CHAR[2-8], rimsky suddenly reached

Generally, my approach with SpamSieve is to make it better at learning from tactics used in spam messages, rather than try to match transient characteristics with a countless number of rules. Sometimes, however, rules work great, and if you add the ones below to your copy of SpamSieve 2.1, it should be easy to catch these new spams.

SpamSieve Blocklist

If you want to copy and paste, the rule text is:

(?:(?-i)^(Re: )?[A-Z]{2,8}, [ a-z]*$)
RND_UC_CHAR