>>MESSAGEID_RATWARE -- 13479s/973h of 91714 corpus (74113s/17601h) 01/22/04
>>
>>Hits almost a thousand ham here. 93% of the hits are spam, which is very
>>promising. Tighten up the rule a little bit, and we'll probably have a
>>winner.
>>
>header MESSAGEID_RATWARE \
> Message-ID: =~ /<[A-Z0-9]{7,13}-[A-Z0-9]{3,11}-[A-Z0-9]{2,6}/i
>
Sorry for this. Earthlink hit a false positive with four hypens. So I
tightened it even further:
header MESSAGEID_RATWARE \
Message-ID =~ /<[A-Z0-9]{7,13}-[A-Z0-9]{3,11}-[A-Z0-9]{2,6}[^-]*\@/i
describe MESSAGEID_RATWARE Message-ID has ratware pattern
Keep the score low, still. 0.5 works for me, even with the false positive.
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
