At 4:01pm -0600 1/5/04, David B Funk wrote:
On Mon, 5 Jan 2004, Ed Kasky wrote:
 >
Any other way to monitor the file's effectiveness?

Ed

Create a simple test mail message that contains a URL fabricated using any one of the hosts listed in BigEvil.cf. Feed the test message to "spamc -R" and look to see if the output report hits a BigEvil rule.

For example, I created a test message called 'test.txt' containing:

  From: bill
  To: bob

http://bigmoneymarketing.com

Now I feed it to spamc:
spamc -R < test.txt
5.6/6.0
Checker-Version SpamAssassin 2.60 (1.212-2003-09-23-exp) on server15.icaen.uiowa.edu
Content analysis details: (5.6 points, 6.0 required, autolearn=no)


   pts rule name              description
  ---- ---------------------- ------------------------------------------
   1.9 DATE_MISSING           Missing Date: header
   0.6 TO_MALFORMED           To: has a malformed address
   3.0 BigEvilList_37         URI: Generated BigEvilList_37

Note that hit on "BigEvilList_37"

To see how a given rule hits, feed it to spamassassin with rule
debugging turned on.

spamassassin -D rulesrun=255 < test.txt
Dave -

Thanks for the lesson:

[EMAIL PROTECTED] ed]$ spamc -R < test.txt
9.0/7.0
Spam detection software, running on the system "yoda2.wrenkasky.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview: http://bigmoneymarketing.com [...]

Content analysis details: (9.0 points, 7.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.0 FROM_NO_LOWER          'From' has no lower-case characters
 1.9 DATE_MISSING           Missing Date: header
 2.1 BAYES_90               BODY: Bayesian spam probability is 90 to 99%
                            [score: 0.9086]
 3.0 BigEvilList_37         URI: Generated BigEvilList_37


Ed Kasky


Randomly Generated Quote:
"Be courteous to all, but intimate with few, and let those few be
well tried before you give them your confidence. True friendship is
a plant of slow growth, and must undergo and withstand the shocks of
adversity before it is entitled to the appellation."
   --George Washington


------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to