All,
I'm happy to say that with your help, and some very minor tweaking, the
"Pharamaxxxx" mail is now tagged in my system as high scoring spam, and dealt
with accordingly ("bad pharma spam, bad!"). Still looking forward to new
rules that Loren spoke earlier, though.
Thanks so much.
Dimitri
On Friday March 17 2006 10:27 am, Randal, Phil wrote:
> I've just checked and whilst that score might seem high, it's causing no
> false positives here.
>
> Of the last 98,932 emails to flow through our gateway, 5,265 hit
> HC_NEWS, of which 1,328 were ham (25.2%) and 3,937 (74.8%) spam.
>
> header HC_NEWS Subject =~ /\bnews/i
> describe HC_NEWS News of new spam
> score HC_NEWS 2.0
>
> Having rigorously trained our Bayes database these spams also hit
> BAYES_99 most of the time.
>
> I've yet to see a false positive with BAYES_99 and yet it's scored way
> too low by default IMHO. I'm currently scoring it at 6.5.
>
> Cheers,
>
> Phil
>
> ----
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
>
> > > HC_NEWS just checks for the word "news" in the Subject line.
> >
> > Phil,
> >
> > Where does the HC_NEWS rule come from? Might it not adversely affect
> > legitimate mail with "news" in the subject line?
> >
> > Dimitri
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
