On 09 March 2002, Kerry Nice said:
> Maybe SA needs to come up with a concept of a profile for a user or a 
> company.  This would make the installation more involved, but ultimately 
> more useful and accurate.  Certain rules like your attribution line or 
> my customized subject could have local settings built at installation 
> time.  If you work for a pharmacy, then the rules specific to drugs will 
> be zeroed out.

OK, here's an idea on how to implement this:

  * define "rule group" as a collection of related rules and a
    group score

  * any given rule can belong to zero, one, or many rule groups

  * if rule A matches on a particular message for a particular
    user at a particular site, then it contributes
      score(A) * score(G1 with A) * ... * score(Gn with A)

    ie. all rule groups to which A belongs affect the score
    assigned to A.

  * some of the default rule groups and there scores might be:
      PORN  1    # discrimnate against porn
      ASIA  0    # discrimnate against .cn/.tw/.kr addresses,
                 # hosts, languages
      MONEY 1    # money-grubbing spam rules
      DRUGS 1    # pharmaceutical spam rules

  * the sys admin determines a "rule profile" for the site, eg.
    a company in China, a real estate company, and a bunch of
    geeks would all have very different rule profiles; the rule
    profile would be set by assigning scores to rule groups

  * users could adjust the site rule profile to taste, simply by
    assigning different scores to rule groups

One nice side-effect of this design: it gives us a simple and general
way to say, "These are spam-detecting rules" and "These are offset rules
to reduce false positives".  Negative scores could be forced by setting
the group score for the anti-false-positive rule group to -1.

Hmmm: putting a rule into two groups, one with a group score < 0 and
another with a group score > 0, could be confusing.  Should probably
warn about that case.

        Greg
-- 
Greg Ward - software developer                [EMAIL PROTECTED]
MEMS Exchange                            http://www.mems-exchange.org

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to