-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Bart,

Friday, November 7, 2003, 10:42:32 AM, you responded to Justin Mason:

BS> Rather than give a rule a score and accumulate the score each time it
BS> hits, have a META rule that accumulates the number of matches on the
BS> regex, and then scoring rules for "more than N hits on the META
BS> rule". Thus the score for that one regex doesn't grow with longer
BS> messages, but the possibility of scoring grows.

So you'd be suggesting something like:

body      T_SAMPLE  /(?:word1|word2|word3|word4|word5)/i
describe  T_SAMPLE  Message has medical words frequently used in spam
score     T_SAMPLE  0.5
accum     T_SAMPLEA ( T_SAMPLE > 5 )
score     T_SAMPLEA 2.0

The T_SAMPLE rule would test for one or more occurrences of its pattern.
If there are any hits, then it would score as indicated (which might be
as low as 0.001, or even 0 if named __T_SAMPLE).

The T_SAMPLEA rule would then test for 6 or more occurrences of the
T_SAMPLE pattern, and if there were six or more occurrences, then
T_SAMPLEA scores 2.0, else it doesn't hit.

I see opportunities for this, and think it would be a good addition to
SA's scoring capabilities.

Bob Menschel

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBP6xbFZebK8E4qh1HEQJF+wCgmq9V8AGZOnReXRE7MABn1SF7cYMAn3W+
mHGpvB6YV4RZjg+aW1gU60HL
=FWlw
-----END PGP SIGNATURE-----




-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to