[Declude.JunkMail] SUBJECTSPACES test

2003-09-10 Thread John Tolmachoff \(Lists\)
I am sure I can do this but thought I would ask:

SUBJECTSPACES1 subjectspaces 15 x x 10 0
SUBJECTSPACES2 subjectspaces 30 x x 10 0

Any message with 30 or more spaces would get a weight of 20 added, correct?

John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SUBJECTSPACES test

2003-09-10 Thread Matthew Bramble




No, that column of numbers relates to the trigger point for the test,
i.e. 1, 3 or 5 BCC's. Each failure scores only one point.

Same goes for the COMMENTS test. I did just a second ago limit that
test to 10, 20, 30, 40 and 50, so the score would top out at 5 (fails
at 10). I've found after testing that very few messages have 50+
comments in them, most of which is easy to detect spam, and I wanted to
protect from false positives being a fan
of using comments tags in my own code.

Matt


Bill Landry wrote:

  Matt, with this configuration, if a message has 5 or more BCC addresses
listed, won't the message fail all three BCC tests and accumulate a total
BCC weight of 9 points?

Also, if a message contains 100 or more comments, won't it will fail all
nine of your comments test and accumulate a total comments weight of 540
points?

Bill
- Original Message - 
From: "Matthew Bramble" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 11:22 PM
Subject: Re: [Declude.JunkMail] SUBJECTSPACES test


  
  
Yes, you are correct.  I do something similar with the BCC and COMMENTS
tests.  I think you have an extra "x" in your definitions though.

BCC-1bcc1x10
BCC-3bcc3x10
BCC-5bcc5x10

COMM-20comments20x10
COMM-30comments30x10
COMM-40comments40x10
COMM-50comments50x10
COMM-60comments60x10
COMM-70comments70x10
COMM-80comments80x10
COMM-90comments90x10
COMM-100comments100x10



John Tolmachoff (Lists) wrote:



  I am sure I can do this but thought I would ask:

SUBJECTSPACES1 subjectspaces 15 x x 10 0
SUBJECTSPACES2 subjectspaces 30 x x 10 0

Any message with 30 or more spaces would get a weight of 20 added,
  

  
  correct?
  
  

  John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


  


---
[This E-mail was scanned for viruses by Declude Virus

  
  (http://www.declude.com)]
  
  
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  
  
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  


-- 
===
Matthew S. Bramble
President and Technical Coordinator
iGaia Incorporated, Operator of NYcars.com
---
Office Phone: (518) 862-9042
Cellular: (518) 229-3375
Fax: (518) 862-9044
E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED]
===




Re: [Declude.JunkMail] SUBJECTSPACES test

2003-09-10 Thread Bill Landry



Oops, I was looking at the wrong column for the 
weight.

Bill

  - Original Message - 
  From: 
  Matthew Bramble 

  To: [EMAIL PROTECTED] 
  
  Sent: Wednesday, September 10, 2003 5:22 
  AM
  Subject: Re: [Declude.JunkMail] 
  SUBJECTSPACES test
  No, that column of numbers relates to the trigger point for the 
  test, i.e. 1, 3 or 5 BCC's. Each failure scores only one 
  point.Same goes for the COMMENTS test. I did just a second ago 
  limit that test to 10, 20, 30, 40 and 50, so the score would top out at 5 
  (fails at 10). I've found after testing that very few messages have 50+ 
  comments in them, most of which is easy to detect spam, and I wanted to 
  protect from false positives being a fan of using comments tags in my own 
  code.MattBill Landry wrote:
  Matt, with this configuration, if a message has 5 or more BCC addresses
listed, won't the message fail all three BCC tests and accumulate a total
BCC weight of 9 points?

Also, if a message contains 100 or more comments, won't it will fail all
nine of your comments test and accumulate a total comments weight of 540
points?

Bill
- Original Message - 
From: "Matthew Bramble" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 11:22 PM
Subject: Re: [Declude.JunkMail] SUBJECTSPACES test


  
Yes, you are correct.  I do something similar with the BCC and COMMENTS
tests.  I think you have an extra "x" in your definitions though.

BCC-1bcc1x10
BCC-3bcc3x10
BCC-5bcc5x10

COMM-20comments20x10
COMM-30comments30x10
COMM-40comments40x10
COMM-50comments50x10
COMM-60comments60x10
COMM-70comments70x10
COMM-80comments80x10
COMM-90comments90x10
COMM-100comments100x10



John Tolmachoff (Lists) wrote:


  I am sure I can do this but thought I would ask:

SUBJECTSPACES1 subjectspaces 15 x x 10 0
SUBJECTSPACES2 subjectspaces 30 x x 10 0

Any message with 30 or more spaces would get a weight of 20 added,
  correct?
  

  John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com


  ---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
  
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  -- 
===
Matthew S. Bramble
President and Technical Coordinator
iGaia Incorporated, Operator of NYcars.com
---
Office Phone: (518) 862-9042
Cellular: (518) 229-3375
Fax: (518) 862-9044
E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED]
===


[Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread Jeff Kratka
Scott,

 This has probably been mentioned but I just heard about it. The
SUBJECTSPACES test, is it an undocumented test? Will it check spaced all in
a row, ie: This MessageHere and the spaces between or does it also
count the space between words.

Jeff Kratka

*
TymeWyse Internet
P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
tel/fax: (541) 839-6027  -  [EMAIL PROTECTED]
*

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread Bill Landry
Jeff, this test adds all spaces found in the subject together (including
single spaces between words), not just contiguous spaces.

Bill
- Original Message - 
From: Jeff Kratka [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, August 02, 2003 12:48 PM
Subject: [Declude.JunkMail] SUBJECTSPACES test


 Scott,

  This has probably been mentioned but I just heard about it. The
 SUBJECTSPACES test, is it an undocumented test? Will it check spaced all
in
 a row, ie: This MessageHere and the spaces between or does it
also
 count the space between words.

 Jeff Kratka

 *
 TymeWyse Internet
 P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417
 tel/fax: (541) 839-6027  -  [EMAIL PROTECTED]
 *

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] SUBJECTSPACES test

2003-08-02 Thread R. Scott Perry

 This has probably been mentioned but I just heard about it. The
SUBJECTSPACES test, is it an undocumented test?
It's currently undocumented, but is part of what we are adding to the 
documentation for 1.75.

Will it check spaced all in a row, ie: This MessageHere and the 
spaces between or does it also
count the space between words.
It counts all the spaces, including ones between words.  To define the 
test, you can use a line such as:

SUBJECTSPACES  subjectspaces  20  x  4  0

That line (in the global.cfg file) would define the test so that it would 
be triggered if more than 20 spaces were found in the subject (and would 
add 4 to the weight of the E-mail if this test was triggered).
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.