Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread RW
On Thu, 25 Oct 2012 18:59:03 +0200 Simon Loewenthal top-posted: > RW wrote: > > >On Thu, 25 Oct 2012 16:47:20 +0200 > >Simon Loewenthal wrote: > >> * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' > >> > >> > >> Does anyone know the rational behind this, > > > >So it wont hit Dear Bob

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
dar...@chaosreigns.com wrote: > >But more importantly, it's because we do not have have the rule >hit statistics from your email .. Which has been on my personal backlog for over a year. (It is self-serving & should have a higher priority thus) .

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread darxus
On 10/25, Bowie Bailey wrote: > On 10/25/2012 10:47 AM, Simon Loewenthal wrote: > >* 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' > > > >Does anyone know the rational behind this, or is our user base simply > >communicating on a higher level? :) I imagine the rational is sound, but I >

Dear Dfs (was Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)')

2012-10-25 Thread David F. Skoll
On Thu, 25 Oct 2012 18:59:03 +0200 Simon Loewenthal wrote: > Except for formal letters to administrative addresses. > Dear Bob was a frivolous and incorrect example. It is really Sir/Madam Here's an argument for *not* making your email address "fi...@example.com", "l...@example.com" or something

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
Except for formal letters to administrative addresses. Dear Bob was a frivolous and incorrect example. It is really Sir/Madam As Alex noted, I coils score it lower,bit am concerned on the overall effect. I'lltest first. Cheers. RW wrote: >On Thu, 25 Oct 2012 16:47:20 +0200 >Simon Loewenthal w

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread RW
On Thu, 25 Oct 2012 16:47:20 +0200 Simon Loewenthal wrote: > > Evening all, > > A great majority of our ham starts with Dear Sir/ Dear Madam / Dear > Bob. > > Therefore I've always wondered why this this is scored so highly: > > * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' > > >

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Alexandre Boyer
Hi all, Simon, I had some FPs because of this rule and because my threshold is lower than 5. I just had a score override to lower it but this rule still hist a lot of spam (419 scams essentially). You may want to fine tune the score according to your specific FPs. Regards, Alex, from prypiat.

Re: Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Bowie Bailey
On 10/25/2012 10:47 AM, Simon Loewenthal wrote: Evening all, A great majority of our ham starts with Dear Sir/ Dear Madam / Dear Bob. Therefore I've always wondered why this this is scored so highly: * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' Does anyone know the rational behind

Question about rule: 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2012-10-25 Thread Simon Loewenthal
Evening all, A great majority of our ham starts with Dear Sir/ Dear Madam / Dear Bob. Therefore I've always wondered why this this is scored so highly: * 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' Does anyone know the rational behind this, or is our user base simply communicating

Re: No magic, since clearing database

2012-10-25 Thread Kevin A. McGrail
On 10/24/2012 8:52 PM, Joseph Acquisto wrote: for the sa-learn with --mbox http://pastebin.com/T0MtyN2J for the sa-learn w/o --mbox http://pastebin.com/pD7kuEsZ expires in a day. joe a. Without --mbox, archive iterator is seeing things as one giant email. Oct 24 19:52:51.383 [10586] info: arc

Re: sa-update & different rulesets

2012-10-25 Thread Bowie Bailey
On 10/24/2012 11:14 PM, dar...@chaosreigns.com wrote: To do sa-update with the default channel and the saught channel, I have a cron job that does: /usr/bin/sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel updates.spamassassin.org No, just grabbing a channel once will not