guys -- I'm going to make the whole question moot (in trunk at least) -- the only reason SOUGHT and SOUGHT_FRAUD were being checked in there was to make their accuracy visible in ruleqa. It's been months since I've looked at that, so it's needless. I'll remove them from svn asap.
--j. 2011/6/11 Karsten Bräckelmann <guent...@rudersport.de>: > On Fri, 2011-06-10 at 23:13 -1000, Warren Togami Jr. wrote: >> Wait a sec, I'm confused about this. "JM_SOUGHT_2 hitting on every >> legit Facebook message" on dev@ list February 17th 2011. If the SOUGHT >> channel was being overridden by the sa-update rules, how would this >> problem appear from the SOUGHT channel? Doesn't this suggest that >> spamassassin was successfully using the SOUGHT channel? > > Yes, and no. grep for SOUGHT in the stock rules... > > The stock rule-set has a snapshot of the SOUGHT_FRAUD patterns, they do > NOT have the SOUGHT patterns. > > > And, well... READ THIS instead. ;) > > -- > char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; > main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: > (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} > >