http://bugzilla.spamassassin.org/show_bug.cgi?id=3071
Summary: Detect attempt to do bayesian poison
Product: Spamassassin
Version: unspecified
Platform: Other
OS/Version: other
Status: NEW
Severity: enhancement
Priority: P5
Component: Rules
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
Look for words that appear to be random, and excludes if common words appear in
their. Detects bayes poison attempts. Has fp with long drawn out letters. Would
be best used imo combined with a meta rule. I use this rule on 5K daily mail
site and have not gotten FP's. Obviously need to determine correct score.
body RANDOMWORD_10 /(?:\b(?!(?:from|even|more|were|with)\b)[a-z]{4,12}
\s+){10}/
describe RANDOMWORD_10 String of 10+ random words
score RANDOMWORD_10 1
body RANDOMWORD_15 /(?:\b(?!(?:from|even|more|were|with)\b)[a-z]{4,12}
\s+){15}/
describe RANDOMWORD_15 String of 15+ random words
score RANDOMWORD_15 3
body RANDOMWORD_20 /(?:\b(?!(?:from|even|more|were|with)\b)[a-z]{4,12}
\s+){20}/
describe RANDOMWORD_20 String of 20+ random words
score RANDOMWORD_20 5
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
