Home Effective Spam Filtering With Eudora

 


OVERVIEW

STRATEGY

THE FILTERS
 1 Virus Attached?
 2 Duplicate Fm-To
 3 Whitelist (Passlist)  
 4 Friendly Domains
 5 Newsletters
 6 List Subscriptions
 7  Keywords
 8 Personality
 9 Bogus Address
10 Username in
   Subject 

11 Click Here
12 !!!!!!!!!!!!
13 Remote Images  
    or Database Links
  
14 Bcc From
    Unknown
 
15 Bad Word List #1
16 Bad Word List #2
17 Tracking Codes
    in Subject

18 Bad Word List #3
19 Bad Word List #4
20 Bad Word List #5
21 Too Many HTTP's
22 Adult Links

23 Bogus Hotmail,
    AOL and Yahoo

"REGEXP" INFO

MOST EFFECTIVE
    SEARCH TERMS

LINKS

FILTER VERBS

Other Interesting
Eudora Filters:

Numerical User
   Name

HTML Contents
Asian Characters
Blank Subject
Secret Keyword
   With Auto-Reply

 

EUDORA SPAM FILTER 12
Excessive Use of Exclamation Marks!!!!!!!!
 

Catches: Any email containing 8 or more total (sequential or not) exclamation marks!

The bottom line is, spammers are all in a frenzy to get your attention, and ultimately to get into your wallet or purse. That hysteria carries over into their writing, and spam ad copy is generally chock-full of exclamation marks!!! Most normal people who write to you, especially if they don't know you, will not be gushing with such exuberance. Spammers almost always are. 35% of all spam I've received contains 8 or more total exclamation marks, while only about 5% of friendly email does (most of which will be protected by the passlist filters) . You could search for less than 8 but the chance of getting false positives goes up. Increasing the number to 14 is still about 16% effective on spam and will reduce the chance of getting false positives to less than 2%, if that proves to be any problem.

 

Match: Incoming and Manual
Header «Body»
Verb: matches regexp (case insensitive)
Value: (!.*){8}
Actions: Transfer To Spam.mbx
   Make Label 3
  Skip Rest

 

Breaking It Down:

We want to find each exclamation mark in the body of the message, and we don't care what is in between them, so (!.*) says to find an exclamation mark, the period says the next character can be any one thing, and the asterisk says there can be any number of the periods. The parenthesis group these things into one unit, and the following {8} curly braces 8 says do that unit 8 times. Simple, elegant, and highly effective!!!!!!!!

The "Make Label"  action is optional but very useful in determining if this  filter caught any particular email.