Hi Robert,

First of all thanks for your reply.


Robert Menschel wrote:
I ran your rules against my personal corpus (scores are xx spam / xx ham
of 43,638 emails in my corpus):

MAILER_LPI  -- 0s/0h of 43638 corpus
MAILER_FM   -- 0s/0h of 43638 corpus
MAILER_AM   -- 1s/0h of 43638 corpus
MAILER_PMTA -- 0s/0h of 43638 corpus
MAILER_IM   -- 0s/0h of 43638 corpus
MAILER_AKS  -- 0s/0h of 43638 corpus
MAILER_RCC  -- 8s/1h of 43638 corpus
MAILER_MWZ  -- 1s/0h of 43638 corpus
MAILER_MA5  -- 3s/1h of 43638 corpus
MAILER_ACC  -- 0s/0h of 43638 corpus

Hummm this is interesting.
Ofcourse this will depend on the kind of spam you have, because we have hits from all this mailers on our spam, and i see some of them haven't scored nothing.


Just added a new rule:
header          MAILER_ERM      X-Mailer =~ /erotic mailer/i
describe        MAILER_ERM      Some porn sites uses this as X-Mailer
score           MAILER_ERM      1.0

If possible could you run this with your corpus?

header        MAILER_LPI    X-Mailer =~ /ListPower\Injector/i
Is there supposed to be a space or something between those two words?
Why the "\"?

It's a space between the two words, but it seems spaces don't need to be escaped, so just remove the backslash.


header        MAILER_RCC    X-Mailer =~ /Roving\ Constant\ Contact/i
No need for the "\" before the space.

I'll correct this. Thanks again Carlos Santos (Portugal)



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to