(ahem) Errr. Never mind. I jumped the gun. My "innocent" sample(s) was using both "www.example.com" as well as the escaped version of "." and for "/" in their URLs. In my haste to make things right, I only saw the "normal text" URLs.
The message I saw held fell in to two categories: the newsletter above, and a bunch of HTML formatted messages that had been much forwarded and had accumulated escaped formatted URLs. The end result for me was to lower my hint weight for these tests, as well as to create counterweight for the newsletters. Andrew 8( -----Original Message----- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 23, 2003 5:57 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Filter text: out of the frying pan and into the fire AC>I think the processing order of the filter text has changed between AC>JunkMail v1.65 and v1.66i. Specifically, I saw high scores on an innocent AC>message due to my spam hint rule. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
