On Mon, 8 Feb 2010, Adam Katz wrote:
I wrote:
My tests have been mildly successful on this note, with FROM_WWW
already getting promoted out of testing:
http://ruleqa.spamassassin.org/?rule=/FROM_W&srcpath=khop
This indicates that we don't actually need to parse any further
because there is no sizable mass of legitimate mail that does
this (and hopefully by getting this rule out the door, people
considering it might decide against it).
John Hardin wrote:
Concur.
http://ruleqa.spamassassin.org/20100201-r905213-n/T_FROM_URI/detail?srcpath=jhardin
To get them both on the same view:
http://ruleqa.spamassassin.org/?rule=%2F^FROM_...%24
Let's clear up the differences between FROM_URI and FROM_WWW ...
Good idea.
Maybe it's just because I'm testing on the command line, but FROM_URI
appears to only fire if there's a character in front of the "www."
portion.
It does. I'm explicitly targeting a quoted comment part. My rule is
somewhat tighter than yours in an attempt to mimimize FPs, admittedly at
the cost of missing some spams.
It also appears to fire on
"other.www.u...@example.com <other.www.u...@example.com>"
Hrm. I modified it to avoid @www, but not ww...@.* - mod for that is
checked in. Perhaps we should let another day's masscheck run against
it...
Presumably, my rule's lack of a TLD check is the main reason it hits
more messages (ham and spam).
Likely true. I'd argue that the list of TLDs spammers use is fairly
limited and having an explicit match is a good idea.
We should decide upon one (with or without revisions) and push it out
the door. We've seen a few threads here on the list and I've seen
several inquiries on the IRC channel about this, so I suspect the
masscheck corpora just aren't getting blasted by it as much as others.
Agreed.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Efficiency can magnify good, but it magnifies evil just as well.
So, we should not be surprised to find that modern electronic
communication magnifies stupidity as *efficiently* as it magnifies
intelligence. -- Robert A. Matern
-----------------------------------------------------------------------
3 days until Abraham Lincoln's and Charles Darwin's 201st Birthdays