My own phone block

[qqqq <qq...@usermail.com>]

This addresses allot of the Diploma type spam.

body     BRIAN_PHONE_NUMBERS /2.?0.?6.?9.?8.?4.?2.?3.?2.?7|2.?0.?6.?3.?3.?3.?0.?0.?5.?1|2.?0.?6.?9.?8.?4.?0.?1.?0.?6|3.?3.?8.
?3.?5.?7.?9|2.?0.?6.?3.?3.?8.?6.?0.?6.?1|2.?0.?6.?2.?0.?2.?2.?0.?3.?3|2.?0.?6.?3.?3.?7.?1.?8.?8.?3|2.?0.?6.?3.?3.?8.?3.?5.?7.
?9|9.?2.?8.?.?4.?9.?6.?2.?8.?0.?5|2.?0.?6.?3.?0.?9.?0.?6.?7.?3|2.?0.?6.?3.?5.?0.?4.?7.?8.?5|2.?0.?6.?3.?5.?0.?6.?4.?0.?4|2.?0
.?6.?9.?8.?4.?1.?7.?0.?5|2.?0.?6.?3.?3.?7.?1.?9.?6.?8/
describe BRIAN_PHONE_NUMBERS      Phone number pulled from spam
score    BRIAN_PHONE_NUMBERS      5.5

I realize I'm runnign the risk of giving the bad guys my rule but I'll take that risk.

QQQQ

Re: My evilnum numbers

[jdow <jd...@earthlink.net>]

Only things that trigger to that test are:
 603    SARE_ENLRGYOUR          57     0.01    0.07    0.26    0.01
 376    SARE_ENLRGYOUR           9     0.00    0.01    0.26    0.01

I don't think those are for products that will work on me. (I did find
that my evil numbers had not been updated in awhile. So I updated it.
Still no hits. It's fascinating the different types of spams that appear
at different sites.)

{^_-}
----- Original Message ----- 
From: "qqqq" <qq...@usermail.com>


Here's what last week looked like:

grep 'spamd: result' /var/log/maillog.1 | wc -l
 540763

grep SARE_EN_ /var/log/maillog.1 | wc -l
   6387

1.18%

My evilnum numbers

[qqqq <qq...@usermail.com>]

Here's what last week looked like:

grep 'spamd: result' /var/log/maillog.1 | wc -l
 540763

grep SARE_EN_ /var/log/maillog.1 | wc -l
   6387

1.18%