> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> My opinions:
>
> Possibly legit, but slightly suspicious score at 0.1-0.4
>
> lose the weight, struggling to lose, shed the pounds
>
> suspect, score at 0.5-1.0
> guaranteed to work, your money back, believe how simple
>
> highly suspect, score at 1.5-2.0
> amazing patch
>
> Another suggestion would be to try to generate meta rules:
>
> body __LOCAL_LOOSE_WEIGHT /\bloose .{0,15}\bweight\b/i
> body __LOCAL_PATCH /\bpatch\b/i
> meta LOCAL_WEIGHT_PATCH ( __LOCAL_LOOSE_WEIGHT && __LOCAL_PATCH)
> score LOCAL_WEIGHT_PATCH 1.0
>
Here are the rules I cam up with after going over the suggestions I got.
Anyone have any comments or recommendations for improving them.
body __TD_Weight_Loss /\blos[et] .{0-15}\bweight\b|\bstruggling
.{0,10}\blose\b|\bshed .{0,15}\bpounds\b/i
describe __TD_Weight_Loss Common phrases from weight loss schemes
for meta rules
body __TD_Marketing_Prases /\bguaranteed
.{0,10}\bwork\b|\byour.{0,3}\bmoney.{0,3}\bback\b|\bbelieve.{0,3}\bhow.{
0,3}\bsimple\b/i
describe __TD_Marketing_Prases Common marketing phrases for meta rules
body TD_Suspect_Phrases /\bamazing .{0,15}\bpatch\b/i
describe TD_Suspect_Phrases Advertising for misc patches
score TD_Suspect_Phrases 1.500
meta TD_Weight_Control ( __TD_Weight_Loss &&
__TD_Marketing_Prases )
describe TD_Weight_Control Metarule to catch common weight control
scams
score TD_Weight_Control 1.500
uri TD_Bad_Domains /\b(?:holdontrywow)\.com\b/i
describe TD_Bad_Domains Common spam domains
score TD_Bad_Domains 3.000
Thanks for your help.
Tim Donahue
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
