SARE_FRAUD vs SURBLs (Was: RE: Mass-check errors)

[Jeff Chan <je...@surbl.org>]

On Wednesday, September 8, 2004, 7:12:26 AM, Smart,Dan Smart,Dan wrote:
> What I found was that the Textcat language rules was main time-sink,
> followed by the SARE_FRAUD ruleset.  Since SURBL now has the PH list, I
> removed the FRAUD ruleset too.

Dan,
SARE_FRAUD has rules to catch text patterns in messages.  It does
not look for phishing URI domains and IP addresses.  Therefore PH
and SARE_FRAUD are not equivalent, and you may want to keep using
the SARE rule, even if you are using PH in multi.surbl.org.

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/

Re: SARE_FRAUD vs SURBLs (Was: RE: Mass-check errors)

[Kelson <ke...@speed.net>]

Jeff Chan wrote:
> SARE_FRAUD has rules to catch text patterns in messages.  It does
> not look for phishing URI domains and IP addresses.  Therefore PH
> and SARE_FRAUD are not equivalent, and you may want to keep using
> the SARE rule, even if you are using PH in multi.surbl.org.

More importantly, many of the patterns SARE_FRAUD looks for are aimed at 
419 scams (also known as the Nigerian scam, though many of them are 
based in other countries now).  These messages rarely contain URLs, and 
when they do they are usually links to actual news stories chosen to 
make the scammer's story more compelling.

-- 
Kelson Vibber
SpeedGate Communications <www.speed.net>