[below, words containing a well-known spam word, were changed to NIAGRA, in order to make it past Source Forge's lame spam filters.]
I was curious to get a feeling for the differences bwtween the 2.55 release and the upcoming 2.60 release, and gathered the following brief statistics. New rules in 6.0 ACCESSDB HTML_FONTCOLOR_GRAY RAVAGESOFAGING BETTERMEMORY HTML_FONTCOLOR_GREEN RAZOR2_CF_RANGE_11_50 BIZ_TLD HTML_FONTCOLOR_MAGENTA RAZOR2_CF_RANGE_51_100 BLANK_LINES_70_80 HTML_FONTCOLOR_NAME RCVD_6_CAPS_ESMTP_ID BLANK_LINES_80_90 HTML_FONTCOLOR_RED RCVD_AM_PM BLANK_LINES_90_100 HTML_FONTCOLOR_UNKNOWN RCVD_IN_BSP_OTHER BZ_TLD HTML_FONTCOLOR_UNSAFE RCVD_IN_BSP_TRUSTED CHARSET_FARAWAY_HEADER HTML_FONTCOLOR_YELLOW RCVD_IN_DYNABLOCK DATE_SPAMWARE_Y2K HTML_FONT_LOW_CONTRAST RCVD_IN_MAPS_DUL DNS_FROM_RFCI_DSN HTML_FORMACTION_MAILTO RCVD_IN_MAPS_NML EMAIL_ROT13 HTML_LINK_PUSH_HERE RCVD_IN_MAPS_RBL FAKED_HOTMAIL_DAV HTML_MIME_NO_HTML_TAG RCVD_IN_MAPS_RSS FAKE_HELO_AOL HTML_TABLE_THICK_BORD RCVD_IN_NJABL_CGI FAKE_HELO_BIGFOOT HTTP_ENTITIES_HOST RCVD_IN_NJABL_DIALUP FAKE_HELO_CARAMAIL ID_REPLY_TO_REPLY RCVD_IN_NJABL_MULTI FAKE_HELO_EMAIL_COM ID_UNIQUE RCVD_IN_NJABL_PROXY FAKE_HELO_EUDORAMAIL IN_ACCORDANCE_WITH RCVD_IN_NJABL_RELAY FAKE_HELO_EXCITE IP_LINK_PLUS RCVD_IN_NJABL_SPAM FAKE_HELO_FLASHMAIL JAPANESE_UCE_SUBJECT RCVD_IN_OPM_HTTP FAKE_HELO_HOTMAIL LOSEBODYFAT RCVD_IN_OPM_HTTP_POST FAKE_HELO_JUNO LOSEWEIGHT RCVD_IN_OPM_ROUTER FAKE_HELO_LYCOS MAILTO_SUBJ_REMOVE RCVD_IN_OPM_SOCKS FAKE_HELO_MAILCITY MIME_BASE64_BLANKS RCVD_IN_OPM_WINGATE FAKE_HELO_MAIL_COM MIME_BASE64_ILLEGAL RCVD_IN_OSIRU FAKE_HELO_MAIL_RU MIME_BASE64_LATIN RCVD_IN_OSIRU_DIALUP FAKE_HELO_MSN MIME_BASE64_NO_NAME RCVD_IN_OSIRU_PROXY FAKE_HELO_NETSCAPE_COM MIME_BASE64_TEXT RCVD_IN_OSIRU_RELAY FAKE_HELO_NETZERO MIME_HTML_MOSTLY RCVD_IN_OSIRU_SPAM_SRC FAKE_HELO_SHAW_CA MIME_HTML_ONLY_MULTI RCVD_IN_OSIRU_SPAMWARE FAKE_HELO_USA_NET MIME_QP_DEFICIENT RCVD_IN_SORBS FAKE_HELO_YAHOO MIME_QP_EXCESSIVE RCVD_IN_SORBS_BLOCK FAKE_HELO_YAHOO_CA MIME_QP_LONG_LINE RCVD_IN_SORBS_HTTP FORGED_AOL_HTML MIME_QP_NO_CHARSET RCVD_IN_SORBS_MISC FORGED_AOL_TAGS MORTGAGE_LINKS RCVD_IN_SORBS_SMTP FORGED_HOTMAIL_RCVD2 MSGID_FROM_MTA_BACKUP RCVD_IN_SORBS_SOCKS FORGED_IMS_HTML MSGID_FROM_MTA_HEADER RCVD_IN_SORBS_SPAM FORGED_IMS_TAGS MSGID_FROM_MTA_HOTMAIL RCVD_IN_SORBS_WEB FORGED_JUNO_FROM MSGID_FROM_MTA_LATER RCVD_IN_SORBS_ZOMBIE FORGED_MUA_AOL_FROM MSGID_FROM_MTA_SHORT RCVD_NUMERIC_HELO FORGED_MUA_APPLEMAIL MSGID_OUTLOOK_INVALID RECEIVED_CACHEFLOW FORGED_MUA_THEBAT_BOUN MSGID_SPAM_1 REMOVE_REMOVAL_1WORD FORGED_MUA_THEBAT_CS MSGID_SPAM_6LETTER REMOVE_REMOVAL_2WORD FORGED_OUTLOOK_HTML MSGID_SPAM_99X9XX99 REMOVE_REMOVAL_NEAR FORGED_OUTLOOK_TAGS MSGID_SPAM_ZEROES REPLY_TO_ULINE_NUMS FORGED_QUALCOMM_TAGS MSGID_THREESIXSIX RUSSIAN_UCE_SUBJECT FORGED_RCVD_FROM_NUM NA_DOLLARS SUBJ_ILLEGAL_CHARS FORGED_RCVD_HELO NIGERIAN_BODY1 TO_FILENAME FORGED_RCVD_NET_HELO NIGERIAN_BODY2 UNWANTED_LANGUAGE_BODY FORGED_THEBAT_HTML NIGERIAN_BODY3 URI_4YOU FORGED_YAHOO_RCVD_SMTP NIGERIAN_BODY4 URI_BANNEDCD FROM_HAS_MIXED_NUMS3 NIGERIAN_BODY_GOVT_3 URI_DOLLARMACHINE FROM_HAS_ULINE_NUMS NIGERIAN_SCAM_VIRTUE URI_FREEHT FROM_ILLEGAL_CHARS NO_RDNS_DOTCOM_HELO URI_HITBOX FROM_WEBMAIL_END_NUMS6 OVERWHELMING_GROWTH URI_OFFERS GENERIC_NIAGRA RATWARE_BAD_REFS URI_PXLG HEADER_COUNT_CTYPE RATWARE_EMPTY_HELO USER_IN_BLACKLIST_TO HEAD_ILLEGAL_CHARS RATWARE_EXISCAN_FORGED USER_IN_DEF_WHITELIST HG_HORMONE RATWARE_HASH_DASH WALAA HTML_COMMENT_RATIO RATWARE_RCVD_BONUS_SPC X_ORIG_HOST HTML_COMMENT_SHOUTING RATWARE_RCVD_LC_ESMTP X_PRI_MISMATCH_HI HTML_FONTCOLOR_BLUE RATWARE_STORM_URI YAHOO_REDIR HTML_FONTCOLOR_CYAN RATWARE_X_SCANNER ---------------------- The following highlights net changes in scores for the (Bayes+networking) score set. Summary of rules with biggest positive change (ie, higher spam scores in 6.0) Rule Name 5.50 6.00 Diff ------------------------------------ BAYES_01 -5.400 -1.524 3.876 BAYES_10 -4.701 -0.908 3.793 NIAGRA_ONLINE 1.045 4.056 3.011 MIME_BOUND_MAIL_BOUND 0.000 2.700 2.700 SECRET_RECORD 0.000 2.699 2.699 DATE_IN_FUTURE_12_24 0.718 3.332 2.614 NO_QS_ASKED 0.000 2.600 2.600 DATE_IN_FUTURE_96_XX 0.000 2.599 2.599 REMOVAL_INSTRUCTIONS 0.000 2.599 2.599 USERPASS 1.297 3.806 2.509 WORK_AT_HOME 0.000 2.399 2.399 BAYES_99 3.008 5.400 2.392 FREE_ACCESS 0.000 2.378 2.378 COMPARE_RATES 0.327 2.700 2.373 PYZOR_CHECK 1.211 3.511 2.300 SUBJ_HAS_UNIQ_ID 0.453 2.677 2.224 OPT_IN_CAPS 0.370 2.570 2.200 FREE_INVESTMENT 0.585 2.700 2.115 UNSUB_SCRIPT 0.000 1.999 1.999 Summary of rules with biggest negative change (lower spam scores) ----------------------------------------------------------------- Rule Name 5.50 6.00 Diff ------------------------------------ RCVD_IN_DSBL 4.295 0.706 -3.589 RCVD_IN_OPM 4.295 1.001 -3.294 FREE_INSTALL 2.900 0.000 -2.900 FURTHER_TRANSMISSIONS 2.900 0.000 -2.900 GET_STARTED_NOW 2.900 0.000 -2.900 HTTP_CTRL_CHARS_HOST 2.900 0.000 -2.900 IDENT_NOBODY 2.900 0.000 -2.900 NO_INVESTMENT 2.900 0.000 -2.900 OUR_PRIVACY_POLICY 2.900 0.000 -2.900 RATWARE_DIRECT_EMAIL 2.900 0.000 -2.900 SEX_FEST 2.900 0.000 -2.900 SUBJ_LIFE_INSURANCE 2.900 0.000 -2.900 X_VMP_TEXT 2.900 0.000 -2.900 HTML_SHOUTING9 2.899 0.000 -2.899 HTML_SHOUTING7 2.900 0.045 -2.855 DAILY_PXE 2.773 0.000 -2.773 SUBJECT_APPROVED 2.799 0.173 -2.626 GET_PAID 2.796 0.178 -2.618 FORGED_MUA_THEBAT 4.299 1.730 -2.569 PORN_6 2.511 0.000 -2.511 TO_EMPTY 2.497 0.000 -2.497 NO_FORMS 2.481 0.000 -2.481 TO_NO_USER 2.324 0.000 -2.324 MIME_BOUND_HEX_24 2.309 0.000 -2.309 WHY_PAY_MORE 2.305 0.000 -2.305 VERB_UP_TO_OR_MORES 2.273 0.000 -2.273 USER_4U2 2.201 0.000 -2.201 SERIOUS_CASH 2.197 0.000 -2.197 FREE_CONSULTATION 2.898 0.711 -2.187 START_NOW_CAPS 1.997 0.000 -1.997 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
