-----Original Message-----
From: Larry Gilson 
Sent: Tuesday, November 25, 2003 3:30 PM
To: 'Tony Bunce'; '[EMAIL PROTECTED]'
Subject: RE: [SAtalk] Ideas


Attached is a custom rule file.  It has been working rather well and I will
be increasing the score from 0.5 to 1.0.  The cf file also has some rules
looking for words obfuscated by pipes.  They have been working well also.


This was my score on your message.  I had to replace the V word to get past
the SF filters.

X-Spam-Report:   ---- Start SpamAssassin results
  8.50 points, 6 required;
  *  2.0 -- BODY: MY: *Vword* in Body
  *  0.6 -- BODY: Message is 30% to 40% HTML
  *  0.1 -- BODY: HTML font color is red
  *  0.2 -- BODY: FONT Size +2 and up or 3 and up
  * -2.6 -- BODY: Bayesian classifier says spam probability is 20 to 30%
  [score: 0.2946]
  *  0.5 -- BODY: MY: Word obfu by periods (a.bcd)
  *  0.5 -- BODY: MY: Word obfu by periods (abcd.ef)
  *  0.5 -- BODY: MY: Word obfu by periods (abcd.efghi)
  *  0.5 -- BODY: MY: Word obfu by periods (abc.d)
  *  0.5 -- BODY: MY: Word obfu by periods (abc.defgh)
  *  0.5 -- BODY: MY: Word obfu by periods (ab.cdefgh)
  *  0.5 -- BODY: MY: Word obfu by periods (abcd.e)
  *  0.5 -- BODY: MY: Word obfu by periods (a.bcde)
  *  0.5 -- BODY: MY: Word obfu by periods (abcd.efg)
  *  0.5 -- BODY: MY: Word obfu by periods (ab.cdef)
  *  0.5 -- BODY: MY: Word obfu by periods (abcdef.ghijkl)
  *  0.5 -- BODY: MY: Word obfu by periods (abcde.fgh)
  *  0.5 -- BODY: MY: Word obfu by periods (ab.cde)
  *  2.0 -- URI: MY: Contains a link to a biz site
  * -0.3 -- Email came from some known mailing list software
  *  0.0 -- Asks you to click below

Bayes was probably negative because it picked up on the SA list.


--Larry



-----Original Message-----
From: Tony Bunce [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, November 25, 2003 1:23 PM
To: [EMAIL PROTECTED]
Subject: [SA Hits: 08.50] [SAtalk] Ideas


I have been seeing lots of spam like this getting through recently

Anyone have any ideas how to reduce this type of spam from getting through?

Thanks,
Tony B, CCNA, Network+
Systems Administration
GO Concepts, Inc. / www.go-concepts.com
Are you on the GO yet?
What about those you know, are they on the GO?
513.934.2800
1.888.ON.GO.YET

Attachment: punctuation.cf
Description: Binary data

Reply via email to