[THIS LIST HAS MOVED!  see http://useast.spamassassin.org/lists.html .]Thursday, 
January 29, 2004, 8:24:15 PM, I wrote:

RM> Even better, since it will catch use of this address in a TO, CC, and/or
RM> From header, might be:

RM> ...

RM> I don't yet have stats for this meta rule (I haven't even linted it yet).

Found lint problem. Fixed. Ran.

Section 3 -- Frequencies Log
(First numeric frequencies, followed by percentage frequencies)

OVERALL     SPAM      HAM     S/O   SCORE  NAME
  97268    79437    17831    0.817   0.00    0.00  (all messages)
   1058     1058        0    1.000   1.00   9.00  RM_bmastgr

   
OVERALL%   SPAM%     HAM%     S/O    RANK   SCORE  NAME
  97268    79437    17831    0.817   0.00    0.00  (all messages)
100.000  81.6682  18.3318    0.817   0.00    0.00  (all messages as %)
  1.088   1.3319   0.0000    1.000   1.00    9.00  RM_bmastgr


This meta rule hits 1.33% of my spam corpus, and none of my ham.

header    __RM_bmastgr1    Received    =~ /for bmastgr\@/
header    __RM_bmastgr2    ToCc        =~ /\bbmastgr\@/
header    __RM_bmastgr3    From        =~ /\bbmastgr\@/
header    __RM_bmastgr4    Envelope-to =~ /\bbmastgr\@/
header    __RM_bmastgr5    Subject     =~ /\bbmastgr\b/
meta      RM_bmastgr       ( __RM_bmastgr1 || __RM_bmastgr2 || _RM_bmastgr3 || 
RM_bmastgr4 || _RM_bmastgr5 )
describe  RM_bmastgr       Directed to/from invalid address often used by spammers
score     RM_bmastgr       9.000  # 1058s/0h of 97268 corpus (79437s/17831h) 01/29/04

Bob Menschel






-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
[THIS LIST HAS MOVED!  see http://useast.spamassassin.org/lists.html .]

Reply via email to