-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2 Nov 2002, Daniel Quinlan wrote:

> Jan Korger <[EMAIL PROTECTED]> writes:
> > Therefore I suggest adding a rule with a negative score assigned matching
> > spam reports in message bodies. This is especially usefull for SAtalk,
> > better than whitelisting as the latter one would also all spam sent to the
> > list address to pass. (This is true for the AWL as well.) Such a rule
> > would is not very likely ever to be found in a spam message unless
> > spammers do try hard to bypass SA.
>
> I think that might be *way* too enticing for spammers.  The solution is
> to just exempt SAtalk and other spam-related mailing lists from spam
> filtering.

That's not a good solution, it's a workaround. I understand the
distinguishing between spam and spam related/quoting mails is hard, if not
impossible but I don't want to workaround this by whitelisting (or
not passing to SA at all) SAtalk because this allows any spam sent to the
list to reach me unfiltered and so far this was my first false positive
on SAtalk, so it isn't a big problem anyways. I'll keep the rules in my
personal SA config, so no spammer will know anyways.

> Anyway, the spam that Bob forwarded was going to be marked
> as spam no matter how you handled the SA headers!  He said it was
> assigned a score of 42.5 when he originally received it.  42.5.

He said so, but this must have included DNSRBLs, razor, etc. His mail
quoting the spam message scored about 11 on my box. Still way above 5,
though.


BTW: Is there a simple command stripping the SA results from a mail as
done by 'spamassassin -r'. I want to reprocess my false
positives/negatives on a regular basis to see whether changed rules will
better SA. I reckon it's not a good idea to process them with the results
still in it.

Jan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: pgpenvelope 2.10.2 - http://pgpenvelope.sourceforge.net/

iD8DBQE9xD36Y6Nk2Nv6ZRcRAqU8AKCGbWJXVS3M1xNrLrsy/y4SQg41PgCfZ2UA
6swN/rw+sFoFtrHekLy0b6w=
=LRLU
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to