OSLIST:DSN:RE: [Declude.JunkMail] Heur Cumulative?
Last warning Andy, please do not use signatures, half the time you post the signature is invalid. John Tolmachoff, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA 92835 714-578-7999, ext. 104 [EMAIL PROTECTED] [EMAIL PROTECTED] www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andy Schmidt Sent: Sunday, November 04, 2001 4:50 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Heur Cumulative? Scott, if the value is 0., only the HEUR10 test would be triggered Not to be argumentative, but your sample doesn't quite fit my experiences. a) a value of 0. doesn't seem to trigger HEUR10 - but triggers HEUR9? So it doesn't seem as if you are using a CEILING test (or rounding). b) If your test is GREAT/EQUAL, then a value of 9 could/should trigger the HEUR8 and the HEUR9 test? If your test is FLOOR, then a value of 0. would only trigger HEUR9. Best Regards Andy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Heur Cumulative?
Scott, a) are HEUR tests cumulative, e.g.: HEUR10 heuristics 10 x 4 0 HEUR9 heuristics 9 x 4 0 HEUR8 heuristics 8 x 3 0 HEURheuristics If the HEUR value is 0., will the weight be: 3 for HEUR8 plus 4 for HEUR9, or only 4 for HEUR9? b) what about tests that have no weight assigned, how are they counted? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.hm-software.com/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Heur Cumulative?
a) are HEUR tests cumulative, e.g.: HEUR10 heuristics 10 x 4 0 HEUR9 heuristics 9 x 4 0 HEUR8 heuristics 8 x 3 0 HEURheuristics If the HEUR value is 0., will the weight be: 3 for HEUR8 plus 4 for HEUR9, or only 4 for HEUR9? They are not cumulative. The way it works now, every E-mail is assigned a level from 1 (almost certainly not spam) to 10 (almost certainly is spam). The weight used will only be for the one level. So if the value is 0., only the HEUR10 test would be triggered, with a weight of 4. b) what about tests that have no weight assigned, how are they counted? They aren't counted. I will be responding to the other comments on v1.28, too, when I can. -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Heur Cumulative?
Scott, if the value is 0., only the HEUR10 test would be triggered Not to be argumentative, but your sample doesn't quite fit my experiences. a) a value of 0. doesn't seem to trigger HEUR10 - but triggers HEUR9? So it doesn't seem as if you are using a CEILING test (or rounding). b) If your test is GREAT/EQUAL, then a value of 9 could/should trigger the HEUR8 and the HEUR9 test? If your test is FLOOR, then a value of 0. would only trigger HEUR9. Best Regards Andy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
