Hi Scott: While Comment may not be an effective measure alone it is definitely a good indicator in a combo test.
We have a combo test that incorporates the following plus several more in a series of test before releasing the email. TESTSFAILED 2 CONTAINS [NOLEGITCONTENT] TESTSFAILED 1 CONTAINS [SUBJECTSPACES] TESTSFAILED 1 CONTAINS [LONGSUBJ] TESTSFAILED 1 CONTAINS [COMMENTS] The above is simply part of a larger combo test that requires a weight of 6 to fail and it is quite effective.. Just a note since I don't think while not a single test should be considered a great indicator it could be a great tool in a combo test. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, February 07, 2005 3:50 PM To: [email protected] Subject: Re: [Declude.JunkMail] Legit message failing COMMENTS test. In January, I had 97 spam hits and 28 ham hits on Comments before I finally coded it out as not effective enough to use. ----- Original Message ----- From: "Dan Geiser" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Monday, February 07, 2005 2:20 PM Subject: [Declude.JunkMail] Legit message failing COMMENTS test. > Hello, All, > I have an issue where a legit e-mail is failing the COMMENTS test. > According to the comments test description... > > "The COMMENTS test will catch spam that uses HTML comments to bypass > filters. It is a very effective test, since it will not catch standard > comments that occasionally appear in legitimate bulk mail; it only catches > comments that are designed to bypass filters." > > so I don't understand why, if that description is accurate, that it is > failing because there's no way in heck this customer would be trying to > bypass any filters. In fact this isn't even a bulk mail message. It's > handwritten. > > How can I tell what part of the message is failing the COMMENTS test? > > Thanks, In Advance, > Dan Geiser > [EMAIL PROTECTED] > > > ------------------------------------------------------------------- > E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
