http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5226





------- Additional Comments From [EMAIL PROTECTED]  2006-12-19 10:43 -------
fwiw, I'm not surprised by this so much.  the stock image spams were sent using
outlook, so rules targeting them tend to hit outlook mails w/ images in them.

-1.44 ALL_TRUSTED

not relevent.

0.81 EXTRA_MPART_TYPE

there's been discussion about this during rule development.  basically it hits
on any multipart/related mails, because the type= parameter is required.  it has
a score < 1 though, which I would read in as "people writing rules don't get a
lot of multipart/related mails, but it does FP, so the score was set low-ish".

0.00 HTML_MESSAGE

info rule.

0.81 INFO_TLD

this rule was killed.  .info is no longer a useful spam-sign.

2.00 PART_CID_STOCK 
2.00 PART_CID_STOCK_LESS 

These are in Justin's sandbox.  They look similar to my rules, so I'll just talk
about those below...

2.80 TVD_FW_GRAPHIC_ID1 
2.00 TVD_FW_MESG1

These are mine.  ID1 just looks at attachment content-ids, and has a great hit
rate in the nightly run:

 11.858  14.3436   0.0055    1.000   0.99    0.00  T_TVD_FW_GRAPHIC_ID1

but if like the above and these spams are made using outlook, then any other
similar mails will be hit.  I'll tone down the score.

MESG1 targetted some old spam, which according to the nightly results don't
occur anymore:

  0.005   0.0058   0.0000    1.000   0.49    0.00  T_TVD_FW_MESG1

so we should trash that rule.  Basically it looks for something that says it was
forwarded, and also has a GIF image attached.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to