419 Spams

Steve Freegard steve.freegard at fsl.com
Sun Oct 18 22:35:40 IST 2009


Hi all,

I have access to a system that receives a *lot* of 419-type spam
e-mails, so using an SA plug-in that I wrote recently (SaveHits:
http://www.fsl.com/support/SaveHits.pm); I've captured over 5000 since
15th October.

These came in very useful recently for me to increase the accuracy of
several bayes databases that were not accurately catching 419s so I've
made it available for others that might find this useful as well.

I've obfuscated the e-mail addresses, domains and source IP address
within all of the messages so the originating site cannot be identified.

You can download it from www.fsl.com/support/419_spams_1009.tar.gz and
import it into your bayes database by running:

tar -zxf 419_spams_1009.tar.gz
sa-learn --spam --dir 419_spams

Obviously - this won't help if the bayes database has been incorrectly
trained for a considerable amount of time but worked for me when
starting afresh and letting bayes autolearn 200 ham messages from the
actual mail stream.

Kind regards,
Steve.


More information about the MailScanner mailing list