Henrik K wrote:
My take so far is that it seems to be accurate, but it is not hitting
enough mail to be really useful.
Please clarify if by "enough mail" you mean "enough 419 etc from freemails"?
If you mean general spam, then obviously it won't match them if they don't
come from the specific freemail domains.
Also remember that even if the hits are just already identified spam, it
helps to make it even more sure. Emails are slightly different vector than
body checksums etc, so even if they don't help at this moment, they might
help on some future run. You can also make pretty foolproof metas from (emailbl
&& freemail_replyto) etc.
So far, the rule has hit on less than 3% of my spam and there were a
total of 2 cases where a higher score on this rule would have made a
difference.
Of course things can always change in the future, but as of now, I don't
see this rule as being particularly useful. I'll continue to watch it.
Maybe things will look different after the weekend when I have a larger
sample size to work with.
--
Bowie
