MMS False Positives

2007-01-23 Thread Iain Smith
Hi, I've just been writing a negative scoring meta-rule to offset the points added by FROM_ALL_NUMS to many MMS messages sent via email. E.g. if it matches FROM_ALL_NUMS and is from @mms.vodafone.co.uk then subtract the 2.5 points added by FROM_ALL_NUMS. The FROM_ALL_NUMS rule itself hits too much

Re: "news spam"

2006-03-21 Thread Iain Smith
Tracey Gates wrote: > I have seen a lot of postings talk about the BAYES_99 rule. I think > that this rule will help tremendously with catch some of this spam as I > have already implemented the "news" rule that Phile Randall posted. I > have searched my server and I do not find the BAYES_99 rule

Re: "news spam"

2006-03-21 Thread Iain Smith
Payal Rathod wrote: > Hi, > To my various email addresses I am getting lot of "Re: news" spam. > SA is not catching all of it. I have pasted a links of headers and body > at, http://pastebin.ca/46477 > Can someone advise on it please? > With warm regards, > -Payal Bayes has been catching these he

Blank Messages

2005-12-13 Thread Iain Smith
Hi, I'm currently getting FPs from users sending themselves mail from personal accounts with blank message bodies. Many times these messages are presumably reminders, and as such have valid subject lines. Often these messages contain attachments with the same filename as the subject, such as I bel

Accessing descriptions of spam tests

2005-10-21 Thread Iain Smith
Perhaps this might be a better one for the developers list... I'm writing a small reporting (perl) script to parse the syslog entries produced by spamd and produce a report based on its findings. One of the reports is the top n most triggered spam tests. Does anyone know of an easy way to access th