Re: image spam detection idea

2006-08-09 Thread Todd Merritt
I had a similar, less expensive thought; Checking the global color table in the header of all of the gif images in a particular message. I tested a couple of spam cases and the GCTs are identical in all of my limited number of test cases. Logan Shaw wrote: > Looks like people have started to ge

Re: Stopping Rules

2005-10-21 Thread Todd Merritt
Evan Platt wrote: At 11:45 AM 10/21/2005, you wrote: If you grouped the rulesets into +/- sets and processed all the - rules first it wouldn't create false ly scored messages. Or would it ? No, but you still would have to process all the rules regardless - I mean a incorrectly whitelisted

Re: Stopping Rules

2005-10-21 Thread Todd Merritt
jdow wrote: From: "Chris L. Franklin" <[EMAIL PROTECTED]> Back in 2.64 There was the option to have SA stop going though rules then it hit a max score. Is there any option for this in 3.X.X ? No. Such a rule actually costs processing time AND would create false positives or false negatives