On Fri, 30 Jan 2004, Jennifer Wheeler wrote: > > 'Bigevil.cf' -- never once seen in ham. > > 'Maybeevil.cf' -- a small number of hits in ham
Here's a suggestion: Rather than try to filter into two files, leave Bigevil as-is. Place questionable domains that appear in Bigevil into another file (I don't know that Maybeevil is the best name, but whatever). Use a META rule such that domains that get hit by *both* Bigevil and Maybeevil get a positive score added back, to offset the Bigevil negative. This removes the burden of filtering Bigevil from Chris, and makes it possible for local admins to "tune down" certain domains. Maybeevil should also be a lot smaller than Bigevil and therefore easier to double-check and edit locally. The META rule requires both to hit so that, if a domain drops out of Bigevil but not out of (the perhaps locally edited) Maybeevil, it doesn't get an unwarranted positive score. ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk