Hello Andy, Tuesday, February 3, 2004, 10:22:15 AM, you wrote:
>> I've just received a new version of the same old message which was missed >> by the Mr Wiggly rules. AB> Persistant little swine this one... The following works nicely for me and AB> has generated no false positives yet (hence the high score), YMMV: AB> # Look for URIs linking to a .GIF or .JPG with one or two letters AB> # then one or two numbers as the name AB> uri AMB_IMAGE_CONTENT /\/[a-z][a-z]?[0-9][0-9]?\.(gif|jpg)/i AB> describe AMB_IMAGE_CONTENT Contains URI linking to numbered GIF or JPG AB> score AMB_IMAGE_CONTENT 3.0 A nice rule, but does hit ham here: OVERALL SPAM HAM S/O SCORE NAME 91185 73148 18037 0.802 0.00 0.00 (all messages) 5345 5254 91 0.934 0.81 3.00 AMB_IMAGE_CONTENT OVERALL% SPAM% HAM% S/O RANK SCORE NAME 91185 73148 18037 0.802 0.00 0.00 (all messages) 100.000 80.2193 19.7807 0.802 0.00 0.00 (all messages as %) 5.862 7.1827 0.5045 0.934 0.81 3.00 AMB_IMAGE_CONTENT Hits 7% of my spam, and 0.5% of my ham. Hits heavily on about.com's newsletters, and thebluebook.com's notices. I'm going to try a modification that excludes those specific graphics, and see what happens... Bob Menschel
