From spamassassin-talk-admin@lists.sourceforge.net Thu Sep 5 12:50:54 2002 Return-Path: Delivered-To: yyyy@localhost.example.com Received: from localhost (jalapeno [127.0.0.1]) by jmason.org (Postfix) with ESMTP id B160F16F1E for ; Thu, 5 Sep 2002 12:50:52 +0100 (IST) Received: from jalapeno [127.0.0.1] by localhost with IMAP (fetchmail-5.9.0) for jm@localhost (single-drop); Thu, 05 Sep 2002 12:50:52 +0100 (IST) Received: from usw-sf-list2.sourceforge.net (usw-sf-fw2.sourceforge.net [216.136.171.252]) by dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g85BdTZ17218 for ; Thu, 5 Sep 2002 12:39:30 +0100 Received: from usw-sf-list1-b.sourceforge.net ([10.3.1.13] helo=usw-sf-list1.sourceforge.net) by usw-sf-list2.sourceforge.net with esmtp (Exim 3.31-VA-mm2 #1 (Debian)) id 17muyY-0002sW-00; Thu, 05 Sep 2002 04:39:06 -0700 Received: from relay05.indigo.ie ([194.125.133.229]) by usw-sf-list1.sourceforge.net with smtp (Exim 3.31-VA-mm2 #1 (Debian)) id 17muxV-0001OC-00 for ; Thu, 05 Sep 2002 04:38:02 -0700 Received: (qmail 67309 messnum 1193166 invoked from network[194.125.172.167/ts12-167.dublin.indigo.ie]); 5 Sep 2002 11:37:56 -0000 Received: from ts12-167.dublin.indigo.ie (HELO example.com) (194.125.172.167) by relay05.indigo.ie (qp 67309) with SMTP; 5 Sep 2002 11:37:56 -0000 Received: by example.com (Postfix, from userid 500) id 0C81E16F21; Thu, 5 Sep 2002 12:22:05 +0100 (IST) Received: from example.com (localhost [127.0.0.1]) by example.com (Postfix) with ESMTP id 09402F7B1; Thu, 5 Sep 2002 12:22:05 +0100 (IST) To: "Kerry Nice" Cc: spamassassin-talk@example.sourceforge.net Subject: Re: [SAtalk] Trend: Spam disguised as newsletters In-Reply-To: Message from "Kerry Nice" of "Wed, 04 Sep 2002 18:25:44 EDT." From: yyyy@example.com (Justin Mason) X-GPG-Key-Fingerprint: 0A48 2D8B 0B52 A87D 0E8A 6ADD 4137 1B50 6E58 EF0A X-Habeas-Swe-1: winter into spring X-Habeas-Swe-2: brightly anticipated X-Habeas-Swe-3: like Habeas SWE (tm) X-Habeas-Swe-4: Copyright 2002 Habeas (tm) X-Habeas-Swe-5: Sender Warranted Email (SWE) (tm). The sender of this X-Habeas-Swe-6: email in exchange for a license for this Habeas X-Habeas-Swe-7: warrant mark warrants that this is a Habeas Compliant X-Habeas-Swe-8: Message (HCM) and not spam. Please report use of this X-Habeas-Swe-9: mark in spam to . Message-Id: <20020905112205.0C81E16F21@example.com> Sender: spamassassin-talk-admin@example.sourceforge.net Errors-To: spamassassin-talk-admin@example.sourceforge.net X-Beenthere: spamassassin-talk@example.sourceforge.net X-Mailman-Version: 2.0.9-sf.net Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Talk about SpamAssassin List-Unsubscribe: , List-Archive: X-Original-Date: Thu, 05 Sep 2002 12:21:59 +0100 Date: Thu, 05 Sep 2002 12:21:59 +0100 X-Spam-Status: No, hits=-7.3 required=7.0 tests=AWL,FOR_FREE,HABEAS_SWE,IN_REP_TO,KNOWN_MAILING_LIST, QUOTED_EMAIL_TEXT,SPAM_PHRASE_03_05 version=2.50-cvs X-Spam-Level: "Kerry Nice" said: > What about some reality check rules. Yeah, you can pack in lots of things > into the header to try and get some negative points, but do they all make > sense in combination. Can you have a Pine message id in the same header > with an Outlook Express one or a Mutt User-Agent? Yes, this is a big bonus of meta rules (new in 2.40); we can now e.g. check for an Outlook-style forwarded message, and not give it negative points unless it contains other signs of being from Outlook. > I think the headers should be paid special attention to. The message > content of something from the NY Times or Lockergnome might look spammy, but > usually they don't forge or fake anything in the header. Tone down the > negative scores and ding them extra for any obvious forgeries. When we get more (good) "nice" tests, the GA will assign lower scores to them. I think the current problem is that there are very few really good nice tests in the current rulebase, and lots of +ve tests that those newsletters hit, giving the GA a big problem to solve. --j. ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Spamassassin-talk mailing list Spamassassin-talk@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/spamassassin-talk