Looking at some of the samples of "hash buster" and "bayes poisoning" spam that have been posted, it would seem to me the they go out of their way to create a large number of unique words, either gobbledygook or random word lists. SA should be able count the number of unique "words" and repeated words in order to track the hamminess/spamminess of those counts, possibly using the number of characters as well. I would think that ham would show a very different profile of size/counts that spam.
Best Regards, Bob ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk