It looks like the ADVERT_CODE rules matched at least one non-spam message in
the mass-checks that determined the scores:

  0.812   1.8540   0.0014    0.999   0.95    1.10  ADVERT_CODE
  0.984   2.2311   0.0145    0.994   0.93    2.14  ADVERT_CODE2

Is there something wrong with those rules, or something wrong in someone's
corpus? It would seem like "ADV:" would only match spam.

Looking at the rules, neither requires the colon. Maybe a rule that checked
for ADV: or [ADV] would get a higher score?

--
Michael Moncur  mgm at starlingtech.com  http://www.starlingtech.com/
"I can't complain, but sometimes I still do." --Joe Walsh


> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Tomki
> Sent: Tuesday, March 04, 2003 12:54 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] 'ADV:' spam
>
>
> With the number and types of hits that this message generated, I am quite
> surprised that the score came up to only 4.2.  Is there enough/any
> legitimacy in the first 4 tests that they alone shouldn't push this spam
> over the 5.0 mark?  I agree with erring on the side of caution for not
> incorrectly flagging messages, but this result indicates a bit too much
> watering-down.  None of those tests look to be negative scorers, either.
>
> --Tomki
>
> Subject: Adv: Web Hosting and Online Store
> Mime-Version: 1.0
> Content-Type: multipart/mixed;
>       boundary="----=_Part_5047_208203.1046777201385"
> X-Spam-Status: No, hits=4.2 required=5.0
>       tests=ADVERT_CODE,ADVERT_CODE2,CLICK_BELOW,HTML_50_60,
>             HTML_FONT_BIG,HTML_FONT_COLOR_BLUE,HTML_FONT_COLOR_RED,
>             HTML_FONT_FACE_ODD,MIME_HTML_ONLY,NO_REAL_NAME,OFFER,
>             SATISFACTION,X_AUTH_WARNING
>       version=2.50
> X-Spam-Level: ****
> X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp)
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Etnus, makers of TotalView,
> The debugger
> for complex code. Debugging C/C++ programs can leave you feeling lost and
> disoriented. TotalView can help you find your way. Available on
> major UNIX
> and Linux platforms. Try it free. www.etnus.com
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>



-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to