-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Bart,
Friday, November 7, 2003, 10:42:32 AM, you responded to Justin Mason: BS> Rather than give a rule a score and accumulate the score each time it BS> hits, have a META rule that accumulates the number of matches on the BS> regex, and then scoring rules for "more than N hits on the META BS> rule". Thus the score for that one regex doesn't grow with longer BS> messages, but the possibility of scoring grows. So you'd be suggesting something like: body T_SAMPLE /(?:word1|word2|word3|word4|word5)/i describe T_SAMPLE Message has medical words frequently used in spam score T_SAMPLE 0.5 accum T_SAMPLEA ( T_SAMPLE > 5 ) score T_SAMPLEA 2.0 The T_SAMPLE rule would test for one or more occurrences of its pattern. If there are any hits, then it would score as indicated (which might be as low as 0.001, or even 0 if named __T_SAMPLE). The T_SAMPLEA rule would then test for 6 or more occurrences of the T_SAMPLE pattern, and if there were six or more occurrences, then T_SAMPLEA scores 2.0, else it doesn't hit. I see opportunities for this, and think it would be a good addition to SA's scoring capabilities. Bob Menschel -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBP6xbFZebK8E4qh1HEQJF+wCgmq9V8AGZOnReXRE7MABn1SF7cYMAn3W+ mHGpvB6YV4RZjg+aW1gU60HL =FWlw -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk