At Sun Jan 18 02:21:14 2004, Robert Menschel wrote:
> 
> MR> header   L_MIME_BOUND_MANY_DIG   Content-Type =~ /boundary=\"\d{19,}\"/
> MR> header   L_MSGID_SPAM1           Message-Id =~ /<[EMAIL PROTECTED]>/
> MR> rawbody  L_TITLE_MESSAGE         m{<TITLE>Message</TITLE>}
> MR> rawbody  L_CONVERTED             m{<DIV><!-- Converted from text/plain format 
> -->}
> 
> L_MIME_BOUND_MANY_DIG -- 153s/0h of 92209 corpus (74874s/17335h) 01/17/04
> 
> L_MSGID_SPAM1 -- 3478s/0h of 92209 corpus (74874s/17335h) 01/17/04
> 
> L_TITLE_MESSAGE -- 238s/15h of 92209 corpus (74874s/17335h) 01/17/04
> Ham Matches:
> # L_TITLE_MESSAGE="<TITLE>Message</TITLE>"
> * customer query to online store, <META content="MSHTML 6.00.2722.900" 
> name=GENERATOR></HEAD>
> * customer query to brick & mortor store, <META content=3D"MSHTML 5.00.2919.6307" 
> name=3DGENERATOR></HEAD>
> * normal/valid email, X-Mailer: Microsoft Outlook, Build 10.0.2616
> etc.

That's disappointing.  But I don't get much mail to my home account
other than list stuff, and my system is too slow to do much checking
on.  At work, I get very little spam and most people don't use
HTML-generating mail clients.

> L_CONVERTED -- 211s/0h of 92209 corpus (74874s/17335h) 01/17/04

I've already modified the repeat counts for number of digits in
L_MIME_BOUND_MANY_DIG, since it's not constant:

header L_MIME_BOUND_MANY_DIG    Content-Type =~ /boundary=\"\d{15,}\"/

changed from \d{19,} to \d{15,}

Martin
-- 
Martin Radford              |   "Only wimps use tape backup: _real_ 
[EMAIL PROTECTED] | men just upload their important stuff  -o)
Registered Linux user #9257 |  on ftp and let the rest of the world  /\\
- see http://counter.li.org |       mirror it ;)"  - Linus Torvalds _\_V


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to