http://bugzilla.spamassassin.org/show_bug.cgi?id=2903
------- Additional Comments From [EMAIL PROTECTED] 2004-05-29 20:51 -------
Having greatly lowered the scores on various from...nums rules, I've also
looked at what parameters would be needed to have viable rules against my
corpus.
Testing specifically for hotmail addresses, and I find no ham that's
[EMAIL PROTECTED]
header RM_fl_d6hotmail From =~ /\b[a-z]+\d{6,[EMAIL PROTECTED]/i
describe RM_fl_d6hotmail From contains apparent spammer email addr pattern
score RM_fl_d6hotmail 3.000
#stype RM_fl_d6hotmail spam
#hist RM_fl_d6hotmail Created by Bob Menschel May 24 2004
#counts RM_fl_d6hotmail 370s / 0h May 24 2004
I then tested the more generic name\d+ and find one ham at 8 digits, and no
ham at 9 digits.
header RM_fl_d9 From =~ /\b[a-z]+\d{9,}\@/i
describe RM_fl_d9 From contains apparent spammer email addr pattern
score RM_fl_d9 3.000
#stype RM_fl_d9 spam
#hist RM_fl_d9 Created by Bob Menschel May 24 2004
#counts RM_fl_d9 20s / 0h May 24 2004
header RM_fl_d8 From =~ /\b[a-z]+\d{8,}\@/i
describe RM_fl_d8 From contains apparent spammer email addr pattern
score RM_fl_d8 3.000
#stype RM_fl_d8 spam
#hist RM_fl_d8 Created by Bob Menschel May 24 2004
#counts RM_fl_d8 230s / 1h May 24 2004
Some variation on these may be improvements over the current distribution
FROM_ENDS_IN_NUMS and/or ADDR_NUMS_AT_BIGSITE and/or FROM_WEBMAIL_END_NUMS6
(ps: I see my CLA status still is X. My CLA was faxed in on Jan 10 2004. I can
scan & email or fax to you if that will help.)
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
