On 03/28/2011 10:41 PM, Ned Slider wrote: >> NSL_RCVD_FROM_USER=1.226, > > Personally I score this rule way up and would have no hesitation > with outright blocking at smtp level - it's as good an indication of > spam as I've ever seen. Scoring at 6pts here and never seen a FP.
This is a good illustration of our corpus not being strong enough; the current stats make that rule look useless since its lowest-scoring match is seven points and it hits 0.0278% of all spam < 10 points. Furthermore, it has 99% overlap with FORGED_MUA_OUTLOOK, which hits far more spam while maintaining a very low ham hit rate. http://ruleqa.spamassassin.org/20110321/NSL_RCVD_FROM_USER/detail
signature.asc
Description: OpenPGP digital signature
