GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Powerful new filter recommended

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Powerful new filter recommended Page: [1]
Login
Message << Older Topic   Newer Topic >>
Powerful new filter recommended - 27.Nov.2006 3:35:20 PM   
jderichsweiler

 

Posts: 24
Joined: 20.Jan.2006
Status: offline
These spammer tactics are really starting to drive me nuts. We should make a new filter that counts the number of MISPELLED words, and if its more than a certain percent (say 25%) of the email, its SPAM.

And as far as false positives.... If you cant spell, I dont want to read your email anyway.
Post #: 1
RE: Powerful new filter recommended - 27.Nov.2006 5:03:22 PM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
It would seem like a good idea perhaps, since most spam is in English so an English dictionary could be used. But what about international users? An English dictionary would see all mail as spam ;) And how would a "dictionary-engine" know which language the mail was in? What about mixed-language mails?

I also don't think misspelled words are a major problem once the bayesian db has been trained.

It would be better if the Keyword checking module supported Regular Expressions for example, and came configured with a number of normally "spam-spelled" words.

The major problem is handling image-based spam which is getting more complicated by the day. Now images are split up into little portions, digital differences which are not seen to the human eye makes the training of OCR-based filters hard (for the anti-spam software and appliances that has this), scanner "footprints" are being scambled etc etc...

Would be interesting to get some feedback from GFI on this. At least some technology feedback...

< Message edited by Mats Bjur -- 27.Nov.2006 5:12:04 PM >

(in reply to jderichsweiler)
Post #: 2
RE: Powerful new filter recommended - 27.Nov.2006 5:22:33 PM   
jderichsweiler

 

Posts: 24
Joined: 20.Jan.2006
Status: offline
Yes, the image emails bother me a great deal too. It gets worse by the day, but I was only really thinking about the mispelling thing... I think there should probably be some sort of master dictionary with multiple languages in it that could be downloaded with updates, and have the filter check for all mispelled words across all languages.. Though it would probably get pretty resource intensive after a while....

Then you could have a small module where you can add custom words to the list, like industry or even business specific language, acronym's, etc. Perhaps even have a way to customize the percentage of mispelled words before being marked as spam. Heck, even 75% mispelled words would catch half the spam we get here.

In my experience here, the emails that come in with mispelled words are mispelled no matter what language they are in, because they are trying to bypass baysean analysis with words that dont exist yet. No matter how many emails I add to baysean, theres always a few that slip through because of some new random mispelling of a word. The new word of the day today was V1_@ag@_ra... I also keyword blacklisted emails with "www [dot] rx44 [dot] com" in the body, because we got hit with 10,000 of them thismorning. I guess the new trick is to spell out the "dot"'s

I really dislike spammers.

(in reply to Mats Bjur)
Post #: 3
RE: Powerful new filter recommended - 28.Nov.2006 8:48:17 AM   
Mark Busuttil

 

Posts: 4833
Joined: 16.Oct.2005
Status: offline
Thank you for your feedback, this has been added as a feature request!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to jderichsweiler)
Post #: 4
RE: Powerful new filter recommended - 28.Nov.2006 3:29:07 PM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
quote:

ORIGINAL: Mark Busuttil

Thank you for your feedback, this has been added as a feature request!

What has, the dictionary function or the Regular Expressions keyword support? No comments on the argumentation?

(in reply to Mark Busuttil)
Post #: 5
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Powerful new filter recommended Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software