Hello Regis,

Thursday, January 22, 2004, 7:25:30 AM, you wrote:

RW> Got a spam that's so easy, the spammers write the rules for us:

RW> Message-ID:
RW> <[EMAIL PROTECTED]>

RW> So,

RW> header MESSAGEID_RATWARE        ALL =~
RW>               /\nMessage-ID:.<[^-]{7,13}-[^-]{3,11}-[^-]{2,6}/i
RW> describe MESSAGEID_RATWARE      Message-ID has ratware pattern
RW> score MESSAGEID_RATWARE         0.5

RW> I've scored it low due to possible false-positives.  And for kicks, the
RW> same "unformed" message-id as given triggers its own rule.  :)

MESSAGEID_RATWARE -- 13479s/973h of 91714 corpus (74113s/17601h) 01/22/04

Hits almost a thousand ham here.  93% of the hits are spam, which is very
promising.  Tighten up the rule a little bit, and we'll probably have a
winner.

Bob Menschel






-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to