On 3/31/2015 11:44 PM, Amir Caspi wrote:
Hi,I'm guessing that TO_IN_SUBJ only pops when the Subject: contains the full email address in To:, not just the user part... is that right? I've been getting a bunch of spam (some of which ends up as FNs) with just the username portion of To: in the Subject line. This is almost invariably spam, so I think it might be worthwhile to add a TO_USER_IN_SUBJ which focuses only on the user part. Presumably one might want to score this a tad lower than TO_IN_SUBJ, but maybe not... A spample is here: http://pastebin.com/qNu0TsfF John, thoughts?
That might be reasonable for most email addresses, but there are quite a few people who have a usable name or nickname as the user part of their email. (j...@example.com). It would not make sense to score an email just for having their name in the subject.
And then there are addresses which use normal words in the address which would also not make sense to score. For example: i...@example.com, ab...@example.com, supp...@example.com, etc.
-- Bowie
