On Thu, Mar 21, 2002 at 12:21:21PM -0000, Tony Hoyle wrote: > I just received a mail whose title contained: > > Subject: 8 P [ADV:ADLT] Time for Detention girls.. l > > ADVERT_CODE is set to > > Subject =~ /(^\s*|\s+)ADV:/i > > Shouldn't this be something like: > > Subject =~ /\bADV:/i > > ..since you don't have to start a word with a space. > > Also why is ADVERT_CODE set to only 1.651? The spam has > just anounced that it is spam... surely the scoring > should automatically push it over the threshold?
Well null route this email before it gets to SA, but yes, I do think that it should just outright tag the email and be done with it. I think this goes along with the optimized performance of SA. Check whitelists/blacklists break out if need be. Process all negatively scored rules, then do the tests in order of the likelyhood that they are going to match from that point on, short circuiting if the threshold is exceeded. Of course, this has already been discussed. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator 300 B Street, Ste 101 707.522.1000 (Voice) Santa Rosa, CA 95404 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = 7F 59 43 1B 44 8A 0D 57 91 08 73 73 7A 48 90 C5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
