Hello Brent,
Thursday, January 8, 2004, 2:10:15 PM, you wrote:
BJN> (the RND_UC_CHAR pattern) and I've just updated it for a few new variants
BJN> that have shown up in the past couple of days. The second one,
BJN> x_headers.cf, builds on the ideas in the thread "X-Mailer is totally
BJN> bogus" on this list. I've collected enough of these to find some very
BJN> consistent header patterns:
BJN> Feedback very welcome!
Section 3 -- Frequencies Log
(First numeric frequencies, followed by percentage frequencies)
XMAILERBOGUS2 looks real good. RATWR1 works. The X-header rules looks
workable, but simply doesn't match any email in my corpus.
OVERALL SPAM HAM S/O SCORE NAME
87289 70035 17254 0.802 0.00 0.00 (all messages)
225 225 0 1.000 1.00 3.00 BCS_XMAILERBOGUS2
77 77 0 1.000 1.00 5.00 BCS_RATWR1
0 0 0 0.500 0.00 3.00 BCS_X_MT
0 0 0 0.500 0.00 3.00 BCS_X_TRI
OVERALL% SPAM% HAM% S/O RANK SCORE NAME
87289 70035 17254 0.802 0.00 0.00 (all messages)
100.000 80.2335 19.7665 0.802 0.00 0.00 (all messages as %)
0.258 0.3213 0.0000 1.000 1.00 3.00 BCS_XMAILERBOGUS2
0.088 0.1099 0.0000 1.000 1.00 5.00 BCS_RATWR1
0.000 0.0000 0.0000 0.500 0.00 3.00 BCS_X_MT
0.000 0.0000 0.0000 0.500 0.00 3.00 BCS_X_TRI
Bob Menschel
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
