EUDORA SPAM FILTER 16
Bad Word List #2

This filter catches 28% of my test spam, and 4% of friendly emails before whitelisting

This filter catches any email with any one of the following matches:

PHP? or ASP? (possible database links)
TODAY!
FREE used 3 or more times in the body of an email
Money amounts of $1000 or more, with or without a comma separator, having three or more contiguous zero's. Ex: $1000, $20,000, $5,000,000, etc.
 

 

Match:	Incoming and Manual
Header	«Body»
Verb:	matches regexp (case insensitive)
Value:	\.PHP\?|\.ASP\?|TODAY!|(FREE.*){3}|\$.?.?.,?000
Actions:	Transfer To Spam.mbx
	Make Label 7
	Make Priority Highest
	Skip Rest

Breaking it down:

\.PHP\?|\.ASP\?|TODAY!|(FREE.*){3}|\$.?.?.,?000

\.PHP\? will find all html links to web page file types of .php that have a ? question mark after them. These links can be to databases which will log the fact that you have just opened that particular email - thereby validating to the spammers that your email address is "a live one".

TODAY!  simply finds all occurrences of the word "today" followed with an exclamation mark.

(FREE.*){3) will find any email which uses the word "FREE" three or more times.

\$.?.?.,?000 finds money references starting with a "$" dollar sign and using three or more zeros "000" , with or without commas.