{"id":381,"date":"2004-04-15T08:25:00","date_gmt":"2004-04-15T08:25:00","guid":{"rendered":"http:\/\/thomas.w-p.me.uk\/blog\/2004\/04\/381\/"},"modified":"2004-04-15T08:25:00","modified_gmt":"2004-04-15T08:25:00","slug":"381","status":"publish","type":"post","link":"https:\/\/thomas.w-p.me.uk\/blog\/2004\/04\/381\/","title":{"rendered":""},"content":{"rendered":"<p><a href=\"http:\/\/www.rulesemporium.com\/\">SpamAssassin Rule Emporium (SARE)<\/a> Finally I find a site that helps me with my own SpamAssassin rules.  I have created the rules below.  I have the spam level set to 3.0 on my <a href=\"http:\/\/www.clarkconnect.com\/\">ClarkConnect box<\/a> at home which seems pretty accurate.  I have it set to 7.0 on the mail server at <a href=\"http:\/\/www.icdsoft.com\/\">icdsoft.com<\/a>.<\/p>\n<p>Of course, my regular expreessions knowledge is woeful, but with <a href=\"http:\/\/www.huddo.net\/weblog\/blogger.shtml\">Max&#8217;s<\/a> help I have refined the rules a bit.  I am getting very high accuracy now, though one did slip through today that was pure HTML and about &#8220;reducing debt&#8221;.  I feel another rule coming on&#8230;<\/p>\n<pre>\n<br><br>header   OldManse_Dodgy_From1 From =~ \/@email.com\/i\n<br>describe OldManse_Dodgy_From1 email.com is dodgy.\n<br>score    OldManse_Dodgy_From1 0.9\n<br><br>body     OldManse_Priice \/priice\/i\n<br>describe OldManse_Priice Priice? Only spammers spell it like that...\n<br>score    OldManse_Priice 2.0\n<br><br>body     OldManse_Meds1 \/meds\/i\n<br>describe OldManse_Meds1 Meds?  Not a UK word.\n<br>score    OldManse_Meds1 2.0\n<br><br>body     OldManse_Meds2 \/medication\/i\n<br>describe OldManse_Meds2 Medication?  Are you sure?\n<br>score    OldManse_Meds2 1.0\n<br><br>body     OldManse_Meds3 \/drugs\/i\n<br>describe OldManse_Meds3 drugs?  Are you sure?\n<br>score    OldManse_Meds3 0.5\n<br><br>body     OldManse_Meds4 \/viagra|vicodin\/i\n<br>describe OldManse_Meds4 Viagra or Vicodin - might be in a joke.\n<br>score    OldManse_Meds4 0.5\n<br><br>body     OldManse_Meds5 \/v\\.?(.\\.|[^i])a\\.?g\\.?r\\.?a\/i\n<br>describe OldManse_Meds5 Disguised Viagra.!\n<br>score    OldManse_Meds5 5.0\n<br><br>body     OldManse_Meds6 \/v\\.?(.\\.|[^i])\\.?c\\.?o\\.?d\\.?i\\.?n\/i\n<br>describe OldManse_Meds6 Disguised Vicodin.\n<br>score    OldManse_Meds6 5.0\n<br><br>body     OldManse_Purchase1 \/p\\.u\\.r\\.c\\.h\\.a\\.s\\.e\/i\n<br>describe OldManse_Purchase1 p.u.r.c.h.a.s.e?  Yeah, right.\n<br>score    OldManse_Purchase1 2.0\n<br><br>body     OldManse_Savings1 \/s\\.aving\\.s\/i\n<br>describe OldManse_Savings1 s.aving.s?  Yeah, right.\n<br>score    OldManse_Savings1 2.0\n<br><br>score\tRCVD_IN_SORBS\t1.0\n<br>score\tRCVD_IN_RFCI\t1.0\n<br><br># John Bokma's blacklist - use at your own risk\n<br># Last update: Thu Feb 12 19:58:40 2004 GMT\n<br># See http:\/\/johnbokma.com\/spam\/blacklist.txt for the latest version\n<br># See http:\/\/johnbokma.com\/spam\/spamdomains.html for an HTML version\n<br><br><br>[snip]\n<br><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>SpamAssassin Rule Emporium (SARE) Finally I find a site that helps me with my own SpamAssassin rules. I have created the rules below. I have the spam level set to 3.0 on my ClarkConnect box at home which seems pretty accurate. I have it set to 7.0 on the mail server at icdsoft.com. Of course, &hellip; <a href=\"https:\/\/thomas.w-p.me.uk\/blog\/2004\/04\/381\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\"><\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-381","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/posts\/381","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/comments?post=381"}],"version-history":[{"count":0,"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/posts\/381\/revisions"}],"wp:attachment":[{"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/media?parent=381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/categories?post=381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thomas.w-p.me.uk\/blog\/wp-json\/wp\/v2\/tags?post=381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}