Hello Martin,
Saturday, January 17, 2004, 10:39:15 AM, you wrote:
MR> I've added the following rules to my local.cf:
MR> header L_MIME_BOUND_MANY_DIG Content-Type =~ /boundary=\"\d{19,}\"/
MR> describe L_MIME_BOUND_MANY_DIG MIME boundary contains lots of digits
MR> score L_MIME_BOUND_MANY_DIG 1.0
MR> header L_MSGID_SPAM1 Message-Id =~ /<[EMAIL PROTECTED]>/
MR> describe L_MSGID_SPAM1 Message-ID has known spammer pattern
MR> score L_MSGID_SPAM1 1.0
MR> rawbody L_TITLE_MESSAGE m{<TITLE>Message</TITLE>}
MR> describe L_TITLE_MESSAGE Mail has an HMTL TITLE tag of "Message"
MR> score L_TITLE_MESSAGE 1.0
MR> rawbody L_CONVERTED m{<DIV><!-- Converted from text/plain format -->}
MR> describe L_CONVERTED Converted from text/plain
MR> score L_CONVERTED 1.0
L_MIME_BOUND_MANY_DIG -- 153s/0h of 92209 corpus (74874s/17335h) 01/17/04
L_MSGID_SPAM1 -- 3478s/0h of 92209 corpus (74874s/17335h) 01/17/04
L_TITLE_MESSAGE -- 238s/15h of 92209 corpus (74874s/17335h) 01/17/04
Ham Matches:
# L_TITLE_MESSAGE="<TITLE>Message</TITLE>"
* customer query to online store, <META content="MSHTML 6.00.2722.900"
name=GENERATOR></HEAD>
* customer query to brick & mortor store, <META content=3D"MSHTML 5.00.2919.6307"
name=3DGENERATOR></HEAD>
* normal/valid email, X-Mailer: Microsoft Outlook, Build 10.0.2616
etc.
L_CONVERTED -- 211s/0h of 92209 corpus (74874s/17335h) 01/17/04
Good rules.
Bob Menschel
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
