Hello Brent,
Thursday, January 22, 2004, 8:33:25 AM, you wrote:
BJN> Comments on this one? Some spam has been slipping through (FN) with this
BJN> in the header. The only ham I have that hit this rule (FP) are a few from
BJN> back in 2001, of the form
BJN> <[EMAIL PROTECTED]>
BJN> header BCS_UPPER_MESSID Message-Id =~ /^<[A-Z]{12,}@/
BJN> describe BCS_UPPER_MESSID Message-Id is all upper-case
BJN> score BCS_UPPER_MESSID 2.0
BCS_UPPER_MESSID -- 2799s/7h of 91714 corpus (74113s/17601h) 01/22/04
Ham Matches:
# BCS_UPPER_MESSID="<IJFLEMLNMGGIDAAA@"
# BCS_UPPER_MESSID="<MFCPDAGAAJJFDAAA@"
# BCS_UPPER_MESSID="<NHBEJKMFCJCCHCAA@"
# BCS_UPPER_MESSID="<CGMGJFDKLJCCHCAA@"
# BCS_UPPER_MESSID="<OAIGHIAANNCCHCAA@"
# BCS_UPPER_MESSID="<BMPONIAJCIGCHCAA@"
# BCS_UPPER_MESSID="<MBIPAIHAGMPMHCAA@"
Ham was from hotbot.com and mailcity.com (latter used by lycos online
email system). Most recent hit in my corpus was December 2002.
Bob Menschel
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
