On Mon, 21 Feb 2011, Warren Togami Jr. wrote:
On 02/21/2011 10:06 PM, Warren Togami Jr. wrote:
I agree it would be wise to allow this to auto-promote, but given the
small size of our ham corpus and the fact that this pattern could rarely
but legitimately appear in non-spam, perhaps we should manually cap its
score to be on the safe side.
To throw out an arbitrary number I'd suggest 0.9 points?
Warren
http: //ruleqa.spamassassin.org/20110221-r1072884-n/T_URI_DEOBFU_INSTR/detail
http: //ruleqa.spamassassin.org/20110221-r1072884-n/URI_OBFU_TLD/detail
On second thought, examine the overlap of these rules. Nearly all such cases
are already caught by high scoring rules like PYZOR_CHECK or SOUGHT. Given
that both rules cannot be 100% correct and the fact that they are numerically
redundant, I advise caution in allowing these to be auto-promoted and
especially auto-scored.
Perhaps we are better off leaving easy to catch temporary campaign patterns
like these to tools better equipped to handle them like SOUGHT or PYZOR.
This I disagree with. How do you know the obfuscations these rules test
for are only temporary? Obfuscating URLs with spaces has a _long_ history.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Health Care _is_ a right - the government has no business keeping
you from getting it. But forcing somebody else to pay for your
health care at gunpoint (i.e. through taxation) is _not_ a right.
-----------------------------------------------------------------------
Today: George Washington's 279th Birthday
