Arnt Karlsen <[EMAIL PROTECTED]> [2003:09:19:18:41:51+0200] scribed: > On Fri, 19 Sep 2003 10:14:56 -0500, > Kirk Strauser <[EMAIL PROTECTED]> wrote in message > <[EMAIL PROTECTED]>: > > > At 2003-09-19T03:33:53Z, Kirk Strauser <[EMAIL PROTECTED]> writes: > > > > OK, last iteration (I promise). Enough people have found this > > helpful, or at least amusing, that I'm posting my final script update. > > > > I'm using the "MICROSOFT_EXECUTABLE" block in SpamAssassin in junction > > with this script. Overnight hit rates look like: > > > > My script : about 4,000 emails > > SpamAssasin: another few hundred that snuck through > > My inbox : about 15-20 <snip />
> ..hmmm, cool. And in .procmailrc'ese it is? No, but this one is: # Thank you, Kirk Strauser - 20030919 # Watch out for inadvertent line breaks # *ALWAYS* run spamassassin --lint header __MDS_Swen_A_0 From =~ /(email|inet|internet|mail|microsoft|ms|net|network)/i header __MDS_Swen_A_1 From =~ /(section|service|system)/i header __MDS_Swen_A_2 From =~ /^\s*(admin|administrator)\s*$/i header __MDS_Swen_A_3 Subject =~ /^\s*(advice|announcement|failure\s+report|letter|mail|notice|report)\s*$/i header __MDS_Swen_A_4 Subject =~ /^\s*(abort|bug|error)\s+\S+/i header __MDS_Swen_A_5 Subject =~ /^.*\s+(advice|announcement|letter|message|notice)\s*$/i header __MDS_Swen_A_6 Subject =~ /^\s*(mail:\s+|message|(returned|undeliverable|undelivered)\s+(mail|message))/i header __MDS_Swen_A_7 Subject =~ /^\s*$/ header __MDS_Swen_A_8 Subject =~ /^(critical|current|internet|last|latest|microsoft|net|network|new|newest|security)\s+/i header __MDS_Swen_A_9 Subject =~ /^.*\s+(pack|patch|update|upgrade)/i meta MDS_Swen_A ((( __MDS_Swen_A_0 && __MDS_Swen_A_1 ) || __MDS_Swen_A_2 ) || ( __MDS_Swen_A_3 || ( __MDS_Swen_A_4 && __MDS_Swen_A_5 ) || __MDS_Swen_A_6 || __MDS_Swen_A_7 ) || ( __MDS_Swen_A_8 && __MDS_Swen_A_9 )) describe MDS_Swen_A MDS - Swen_A worm score MDS_Swen_A +10.0 -- Best Regards, mds mds resource 877.596.8237 - Dare to fix things before they break . . . - Our capacity for understanding is inversely proportional to how much we think we know. The more I know, the more I know I don't know . . . --
pgp00000.pgp
Description: PGP signature
