Saturday, July 5, 2003, 10:36:15 AM, you wrote: SA> Over the past several weeks, I've noticed an increasing amount of SA> spam that is getting through SpamAssassin with scores in the 4.0-4.9 SA> range. This makes me wonder if perhaps some spammers have started to SA> taylor their spams as follows: run the default version of SA> SpamAssassin, feed their messages through it, and keep tweaking the SA> messages until SpamAssassin lets them through.
SA> Does anyone else think that this could be possible? It seems to me SA> that this process could be easily automated, or at least SA> semi-automated. Not only possible, but probable. If you were a spammer, wouldn't it be worth your while to do this? If you use SA for awhile you will see this pattern repeating over time -- the newest version will tend to have great results at first, diminishing in effectiveness over time as the spammers develop new tricks and workarounds. One thing I've done is lower my required score to 4.0 - I have very few false positives. (In fact, I don't think I've seen any since I did this, but the experience of others may vary -- I simply did this after making a similar observation to yours, a lot of false negatives in the 4.0-4.9 range). I think the only way to avoid this problem is to use the Bayes, Auto-whitelisting, and RBL features that come with SA. -Abigail ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
