Hello Matt, Wednesday, November 19, 2003, 12:47:22 PM, you wrote:
MC> However it seems the latest rounds of Nigerian Scam mails look like MC> ham to Bayes. All of them are scoring bayes_00, which brings them MC> below our threshold. I keep feeding copies of it into sa-learn, but MC> without luck. No problem here, but I don't know whether that's because Bayes catches them, or our custom rules... MC> Anyone have some custom rules that would help here? I want to keep MC> our 0 false positives record, so I am hesitant of just increasing the MC> NIGERIAN rules by 4 or 5 points to coutner the bayes_00 negative score. I have these rules in my system, most of which, along with others, can be found on the Rules Emporium, or at http://www.exit0.us Note that I run with a conservative 9.0 spam threshold, and therefore my scores tend to be much higher than most systems will tolerate. First, increase the scores of the SA rules which do work: score NIGERIAN_BODY 9.10 # Increased 06/03/03, 06/19 score NIGERIAN_SUBJECT1 5.80 # Added 07/10 (doubled default) score NIGERIAN_SUBJECT2 4.00 body RM_bp_NigLetterAuth /letter of authority/i # From Rules Emporium describe RM_bp_NigLetterAuth Nigerian type letter. score RM_bp_NigLetterAuth 1.23 # 23 spam, 0 ham, Oct 25 2003; 16s/0h of 39989 corpus body RM_bw_LikeNigeria /\b(?:nigerian?|lagos|zimbabwe|Sierra.Leone|Republic.du.Benin|congo|Abidjan|Cote.?D'?Ivoire|GHANA|Malaysia|South.Africa|Saharawi|Republic.of.Sahara)\b/i describe RM_bw_LikeNigeria mentions some country, city, or state often used in Nigeria spam/scam score RM_bw_LikeNigeria 1.113 # 207s/32h of 30797 corpus Sep 20 2003; 362s/31h of 39989 corpus header RM_sp_GodLordName Subject =~ /in the (?:Lord'?s Name|name of (?:our|the) lord)/i describe RM_sp_GodLordName Subject mentions something in the Lord's name score RM_sp_GodLordName 0.7 # 14 spam, 1 ham, Sep 4 2003; 2s/0h of 39283 corpus header RM_sp_InYourCountry Subject =~ /in your country/i describe RM_sp_InYourCountry Subject mentions something In Your Country score RM_sp_InYourCountry 0.2 # 2 spam, 0 ham, Jul 31 2003; 0s/0h of 39283 corpus body RM_bp_AsAForeigner /(?:who was a|as a|an? honest|you being a) foreigner/i describe RM_bp_AsAForeigner contains apparent spammer reference to a foreigner score RM_bp_AsAForeigner 1.63 # 63 spam, 0 ham, Sep 13 2003; 43s/0h of 39989 corpus body RM_bp_FormerPresident /the former President/i describe RM_bp_FormerPresident The former president of somewhere or something score RM_bp_FormerPresident 1.15 # 15 spam, 0 ham, Oct 25 2003; 6s/0h of 39989 corpus body RM_bp_God2ndChance /God gives .{1,10}second chance/i describe RM_bp_God2ndChance claims God is/has give(n) second chance score RM_bp_God2ndChance 1.3 # 1s/0h of 30804 corpus; 3s/0h of 39989 corpus body RM_bp_GodFearPart /God fearing partner/i describe RM_bp_GodFearPart mentions a god fearing partner score RM_bp_GodFearPart 0.20 # 2 spam, 0 ham, Jul 24 2003; 1s/0h of 39989 corpus body RM_bp_GodLordName /in the (?:Lord'?s Name|name of (?:our|the) lord)/i describe RM_bp_GodLordName mentions something in the Lord's name score RM_bp_GodLordName 0.85 # 14 spam, 1 ham, Sep 4 2003; 17s/1h of 39989 corpus body RM_bp_GodsWish /the wish of God/i describe RM_bp_GodsWish claims God would be in favor of this. score RM_bp_GodsWish 0.20 # 1 spam, 0 ham, Jul 23 2003; 2s/0h of 39989 corpus body RM_bp_GodWantsIt /God want(?:ed|s)? it/i describe RM_bp_GodWantsIt mentions that god wants/wanted it score RM_bp_GodWantsIt 0.1 # 1s/0h of 39989 corpus; 1s/0h of 39989 corpus body RM_bp_IntlBank /International Bank/i describe RM_bp_IntlBank mentions an international bank, possibly by name score RM_bp_IntlBank 0.60 # 6 spam, 0 ham, Sep 13 2003; 3s/0h of 39989 corpus body RM_bp_NewChristConvert /new Christian convert/i describe RM_bp_NewChristConvert mentions a new Christian convert score RM_bp_NewChristConvert 0.6 # 6 spam, 0 ham, Sep 4 2003; 3s/0h of 39989 corpus body RM_bp_PersBankAcct /Personal Bank Account/i describe RM_bp_PersBankAcct contains reference to a Personal Bank Account score RM_bp_PersBankAcct 2.1 # 3 spam, 0 ham, Oct 23 2003; 6s/0h of 39989 corpus body RM_bp_SecurityCompany /security (?:company|storage house)/i describe RM_bp_SecurityCompany mentions a security company score RM_bp_SecurityCompany 1.453 # 90 spam, 4 ham, Aug 15 2003; 136s/2h of 39989 corpus body RM_bp_TransferFund /transfer this fund/i describe RM_bp_TransferFund mentions transfering funds score RM_bp_TransferFund 1.16 # 16 spam, 0 ham, Sep 4 2003; 12s/0h of 39989 corpus body RM_bp_TrueXtian /true christian/i describe RM_bp_TrueXtian Someis claiming to be a true christian score RM_bp_TrueXtian 1.1 # 1 spam, 0 ham, Oct 23 2003; 2s/0h of 39989 corpus body RM_bp_UrgentReply /urgent reply|reply urgent/i describe RM_bp_UrgentReply requests an "urgent" reply score RM_bp_UrgentReply 2.22 # 122 spam, 0 ham, Oct 23 2003, 92s/0h of 39989 corpus body RM_bp_UtmostSecrecy /utmost secrecy/i describe RM_bp_UtmostSecrecy mentions utmost secrecy score RM_bp_UtmostSecrecy 1.11 # 8 spam, 0 ham, Oct 23 2003; 11s/0h of 39989 corpus body RM_bp_YourMinistry /your ministry/i describe RM_bp_YourMinistry mentions a tax write-off score RM_bp_YourMinistry 1.11 # 11 spam, 0 ham, Aug 11 2003; 10s/1h of 39989 corpus body RM_bp_YourMinistry1 /May God bless you and your ministry/i describe RM_bp_YourMinistry1 mentions a tax write-off score RM_bp_YourMinistry1 0.5 # 2 spam, 0 ham, Oct 24 2003; 2s/0h of 39989 corpus body RM_bw_SECRECY /secrecy/i describe RM_bw_SECRECY mentions secrecy score RM_bw_SECRECY 0.154 # 28 spam, 25 ham, Oct 24 2003; 34s/21h of 39989 corpus Bob Menschel ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
