-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Jerry,

Friday, June 6, 2003, 6:59:39 PM, you wrote:

JB> I've come up with lots of custom rules as of late, ... Please give me
JB> comments as to whether you find them to be accurate/useful.

Running them against my personal corpus of 3k spam and 12k ham (and
unable to properly emulate rawbody tests),

JB> header SUBJECT_TAG_A Subject =~ /\s{4,}\S+ {1,}[a-z0-9]{4,}$/i
caught 194 spam, 0 ham
JB> header SUBJECT_TAG_B Subject =~ /  [a-z0-9]{10,}$/i
caught 220 spam, 4 ham
JB> rawbody SPAM_TAG_C /-=[a-zA-Z0-9]{10,}=-/
caught  49 spam, 0 ham
JB> rawbody SPAM_TAG_D / -[0-9a-z.]{10,}- /i
no matches at all
JB> rawbody SPAM_TAG_E /[a-z0-9]{25,}/i
matched more ham than spam, but I suspect something is wrong with the way
my email client implemented this test -- I wouldn't trust my results
here.
JB> uri URI_SPAM_URL /\.[a-z][a-z][0-9][0-9]\.[com|net]/i
matched 134 spam, 5 ham
JB> uri URI_SPAM_URL_B /\.[a-z][0-9][a-z][0-9]\.[com|net]/i
matched   9 spam, 6 ham
JB> rawbody HIDE_WHITE_TEXT /font color=["|']?\#FFFFFF/i
another test that runs wrong on my system -- matched non-HTML ham.

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPuIeSJebK8E4qh1HEQIJzgCfak7xI2ARVA9NhVLgd/bj8if4688AoKKF
0Xf2K4hds4Rza9x9PhI0uyh7
=i4rn
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to