Mailing List Archive

On Thu, Mar 11, 2004 at 11:21:57AM -0600, Scott Williams , Area4 wrote:
> This one slipped by the Nigerian rules completely. Notice no monetary
> amounts mentioned and no mention of countries.

Yeah. They morph too quickly to keep up usually. I haven't tried
working on the rules since the current iteration which was for 2.5x.

> Any suggestions on how to battle these with SA?

Bayes. :)

--
Randomly Generated Tagline:
"routing problems on the neural net" - Today's BOFH Excuse

I was about to suggest a rule for an all-uppercase body along with "bank", "executive", and "government", but then I noticed that he put an email address in lowercase in the message. Which doesn't match the return-path header, unsurprisingly enough.

Loren

-----Original Message-----
From: "Scott Williams , Area4" <swilliams@area4.k12.il.us>
Sent: Mar 11, 2004 9:21 AM
To: spamassassin-users@incubator.apache.org
Subject: Smarter Nigerians?

This one slipped by the Nigerian rules completely. Notice no monetary
amounts mentioned and no mention of countries.

Any suggestions on how to battle these with SA?

Thanks

SCott




X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
smtp1.area4.k12.il.us
X-Spam-Status: No, hits=2.7 required=3.5 tests=MIME_BOUND_MANY_HEX,
UPPERCASE_75_100 autolearn=no version=2.61
X-Spam-Level: **
Return-Path: nuhumanzo@netscape.net
Message-ID: <*******>
X-OriginalArrivalTime: 11 Mar 2004 15:38:26.0515 (UTC)
FILETIME=[E528DA30:01C4077E]

--a1540bbb-4744-4e2f-af9e-41bb00f6831a
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


--a1540bbb-4744-4e2f-af9e-41bb00f6831a--



-----Original Message-----
From: nuhu manzo [mailto:nuhumanzo@netscape.net]
Sent: Thursday, March 11, 2004 9:37 AM
To: Scott Oyer
Subject: FROM ;ALHAJI DR NUHU MANZO


ATTN: SIR,


I AM ALHAJI DOCTOR NUHU MANZO, A BANK EXECUTIVE. I AM SENDING THIS
MESSAGE TO YOU IN CONFIDENCE. IT WOULD HAVE BEEN SENT THROUGH MAIL. BUT
I AM AFRAID THAT FOR SOME REASONS I DECIDED NOT TO. I AM ASKING FOR YOUR
FAVOR IN THE TRANSFER OF SOME MONEY BELONGING TO ONE MR BARRY KELLY
(DECEASED) WHOSE DEATH WE
WERE NOT AWARE OF UNTIL WE NO LONGER GOT REPLY TO OUR ROUTINE
NOTIFICATIONS TO HIS FORWARDING ADDRESS. WE WERE HOWEVER TOLD BY HIS
EMPLOYERS, THAT HE DIED FROM AN AUTOMOBILE CRASH. NOW ALL ATTEMPTS TO
TRACE HIS NEXT OF KIN HAS PROVED ABORTIVE.
THERE IS HOWEVER
NO TRACE IN ANY OF HIS OFFICIAL
DOCUMENTS OF A NEXT OF KIN.

THE BASIC LINE HERE IS THAT AT THE EXPIRATION OF 6 YEARS, THE MONEY WILL
REVERT TO THE OWNERSHIP OF THE GOVERNMENT. NOBODY IS EVER COMING TO
CLAIM THIS MONEY HAVING SPENT FIVE(5) AND A HALF YEARS IN OUR BANK.

SO ALL I AM ASKING FROM YOU IS THAT YOU SHOULD STAND IN AS HIS NEXT OF
KIN TO AVOID THE MONEY GOING INTO THE HANDS OF CORRUPT GOVERNMENT
OFFICIALS. ALSO NOTE THAT, IT IS IMPOSSIBLE FOR THE MONEY TO LEAVE THE
COFFERS OF THE BANK WITHOUT A NEXT OF KIN, WHO ALSO MUST BE A FOREIGNER.


FURTHER WORKINGS OF THIS INITIATIVE, AND A SHARING RATIO, PLUS POSSIBLE
AREAS OF INVESTMENT WILL BE DISCUSSED AS SOON AS I HEAR FROM YOU.

BEST REGARDS.

ALHAJI DOCTOR NUHU MANZO

NOTE;YOU CAN REACH ME WITH THIS E-MAIL ADDRESS;nuhumanzo@spinfinder.com

On Thu, Mar 11, 2004 at 12:26:57PM -0500, Theo Van Dinter wrote:
> On Thu, Mar 11, 2004 at 11:21:57AM -0600, Scott Williams , Area4 wrote:
> > This one slipped by the Nigerian rules completely. Notice no monetary
> > amounts mentioned and no mention of countries.
>
> Yeah. They morph too quickly to keep up usually. I haven't tried
> working on the rules since the current iteration which was for 2.5x.
>
> > Any suggestions on how to battle these with SA?
>
> Bayes. :)

Unfortunately bayes give often nigerian spam bayes_00 score even if it
get 10 score before bayes :(
cahya.

At 11:29 12/03/2004, Cahya Wirawan wrote:
>On Thu, Mar 11, 2004 at 12:26:57PM -0500, Theo Van Dinter wrote:
> > On Thu, Mar 11, 2004 at 11:21:57AM -0600, Scott Williams , Area4 wrote:
> > > This one slipped by the Nigerian rules completely. Notice no monetary
> > > amounts mentioned and no mention of countries.
> >
> > Yeah. They morph too quickly to keep up usually. I haven't tried
> > working on the rules since the current iteration which was for 2.5x.
> >
> > > Any suggestions on how to battle these with SA?
> >
> > Bayes. :)
>
>Unfortunately bayes give often nigerian spam bayes_00 score even if it
>get 10 score before bayes :(
>cahya.

This is a known problem, which to my knowledge nobody has found a
satisfactory solution to yet....

Regards,
Simon

A fraud.cf file is soon to be released by SARE that should catch most. Been
working great here.

00Chris

> -----Original Message-----
> From: Theo Van Dinter [mailto:felicity@kluge.net]
> Sent: Thursday, March 11, 2004 12:27 PM
> To: Scott Williams , Area4
> Cc: spamassassin-users@incubator.apache.org
> Subject: Re: Smarter Nigerians?
>
>
> On Thu, Mar 11, 2004 at 11:21:57AM -0600, Scott Williams ,
> Area4 wrote:
> > This one slipped by the Nigerian rules completely. Notice
> no monetary
> > amounts mentioned and no mention of countries.
>
> Yeah. They morph too quickly to keep up usually. I haven't tried
> working on the rules since the current iteration which was for 2.5x.
>
> > Any suggestions on how to battle these with SA?
>
> Bayes. :)
>
> --
> Randomly Generated Tagline:
> "routing problems on the neural net" - Today's BOFH Excuse
>

> Unfortunately bayes give often nigerian spam bayes_00 score even if it
> get 10 score before bayes :(
> cahya.

Then I think you need to feed a bunch of them into Bayes as spams. They
catch very well here.

Loren