Mark Martinec wrote:

MM> Matt,
MM>
MM> | Unfortunately that's not strictly true.
MM> |
MM> | You could very easily poison the database using short english phrases. I
MM> | see an awful lot of emails that just contain single words, such as:
MM> | "Hello???" or "How did it go?" etc. Generating things like that using a
MM> | Markov Chain system wouldn't be terribly hard.
MM>
MM> This is one of the three reasons why amavisd-new (a MTA-to-virus scanner
MM> interface, which can call SA as well) prefers to call Razor by itself
MM> and not letting SA do it:

Note that doing it this way instead of inside SA means that razor is being used
as a black/white decision criterion, rather than as just-another-scored-rule in
SA.  SA assigns razor a score of 3.0 by default, which means that by itself a
razor positive is not enough to flag a message as spam.  Now probably, the score
should be higher (4?  4.5?), but part of the strength of SA is that it doesn't
tend to flag things based on a single criterion.

I do like the concept of only calling Razor for messages bigger than a certain
size.  I think maybe I'll add that to SA.  Well, I'll file a bugzilla ticket for
now, maybe fix it later.

C


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to