[leafnode-list] Filtering patterns (leafnode 2)

[Chris Davies]

Folks,

I'm using a scored filtering approach to throw away large chunks of spam. It 
seems to work well, but I'm a little concerned it may be throwing away too 
much. (Recently I've not seen more than a few articles in uk.comp.os.linux, 
for example.)

Does anyone have any critique of this chunk from my filter file, please? (I've 
omitted things that keep threads in which I've posted, etc., in favour of the 
spam related chunk)

Thanks,
Chris


########################################################################
# SPAM trapping. Start with +10 and knock off 6 for each "bad" match
#
newsgroups = .*
pattern = .*
action = 10

####################################
# The next group are "two strikes and out"


# Known spewer
newsgroups = .*
pattern = ^Message-Id:\s*<[^@]+ at googlegroups.com>$
action = -6

# Known spewer
newsgroups = .*
pattern = ^X-Complaints-To:\s*abuse at suddenlink\.net\b
action = -6

# Known spewer
newsgroups = .*
pattern = ^X-Complaints-To:\s*abuse at usenetserver\.com\b
action = -6

# Known spewer
newsgroups = .*
pattern = ^From:.*\b(yahoo|hotmail)\.
action = -6

####################################
# Miscellaneous things I don't like

# Long subject lines really hack me off
newsgroups = .*
pattern = ^Subject:.{80,}
action = -6

# I also mark down subjects containing two or more words that are all
# capitals, but I've got that rule in my personal filter file rather
# than here


####################################
# News from Suddenlink must have a matching Message ID
newsgroups = .*
pattern = ^Path:\s*.*\bsuddenlink.net!not-for-mail$
action = -6

newsgroups = .*
pattern = ^Message-ID:\s*<.*@suddenlink.net>$
action = 6

####################################
# News from UsenetServer must have a matching Message ID
newsgroups = .*
pattern = ^Path:\s*.*\busenetserver.com!FUSE.NET-[^!]+!not-for-mail$
action = -6

newsgroups = .*
pattern = ^Message-ID:\s*<.*@usenetserver.com>$
action = 6