Print Page | Close Window

Advice on how to filter Nigerian scam type emails?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6523
Printed Date: 14 December 2017 at 12:16pm


Topic: Advice on how to filter Nigerian scam type emails?
Posted By: Alan
Subject: Advice on how to filter Nigerian scam type emails?
Date Posted: 17 July 2008 at 8:05pm
Been using SF since version 1.1 and it works very well.  Of the certain spam types that still seem to get through, the typical Nigerian scam email seem to account for a lot of them.  What do others here do to help them filter this sort of spam.  There is just too much variety and not much common ground that I can find to filter them.



Replies:
Posted By: dcook
Date Posted: 18 July 2008 at 1:09pm
How about a country filter?

-------------
Dwight
www.vividmix.com


Posted By: Alan
Date Posted: 21 July 2008 at 2:08pm
Unfortunately since 99% of these are sent via webmail (yahoo, hotmail, etc), the country filter would have little effect.

Originally posted by dcook dcook wrote:

How about a country filter?


Posted By: mbrusl
Date Posted: 22 July 2008 at 3:47pm
Originally posted by Alan Alan wrote:

Unfortunately since 99% of these are sent via webmail (yahoo, hotmail, etc), the country filter would have little effect.

Originally posted by dcook dcook wrote:

How about a country filter?


Alan,

You may want to try looking at this emails and coming up with keywords or phrases that can be caught.  Then if normal email is caught in it as well, you can always release the good one's that did get caught, from the quarantine.




-------------
Michael
support@spacequad.com
If blocked, use spacequad@hotmail.com
Spacequad Internet Services
Spacequad AntiSpam Services
Thunder Bay, Ontario
--------------------------------------------------


Posted By: Alan
Date Posted: 22 July 2008 at 5:09pm
Originally posted by mbrusl mbrusl wrote:

Originally posted by Alan Alan wrote:

Unfortunately since 99% of these are sent via webmail (yahoo, hotmail, etc), the country filter would have little effect.

Originally posted by dcook dcook wrote:

How about a country filter?


Alan,

You may want to try looking at this emails and coming up with keywords or phrases that can be caught.  Then if normal email is caught in it as well, you can always release the good one's that did get caught, from the quarantine.




Thanks Mike.  The bulk of this type of spam use a full range of everyday verbiage, such that using simple text filters would create a management headache.  Many SF users that have been using it for a while don't really use a lot of basic text filters anymore for that reason.  What I was hoping for was more of other ways that users have been able to deal with this type of spam in a creative fashion, outside of the basic filters.


Posted By: mbrusl
Date Posted: 22 July 2008 at 7:59pm
Alan,

The only other thing I can suggest is to verify the IPs of the senders and throw a complaint email back at them.  Recently Google had done that to me and I sent a letter to them explaining the situation after receiving several hundred spam mails in a one day period.  Of course this was after showing them the proof of logs.  Needless to say, they were not to happy about being bitch slapped (geeting caught).


-------------
Michael
support@spacequad.com
If blocked, use spacequad@hotmail.com
Spacequad Internet Services
Spacequad AntiSpam Services
Thunder Bay, Ontario
--------------------------------------------------


Posted By: Alan
Date Posted: 23 July 2008 at 1:48pm
Mike, the bulk of these are sent via webmail (Yahoo, Hotmail, etc) so the IP's of the senders will be the valid IP's of those webmail hosts.  That is one more reason why these are harder to filter.  They don't carry harmful payloads or such, but are an annoyance that they get by SF.



Print Page | Close Window