Hello Brent,

Wednesday, February 18, 2004, 8:25:18 AM, you wrote:

BJN> On Wed, 18 Feb 2004, Robert Menschel <[EMAIL PROTECTED]> wrote:
>> BA> header   T_LCASED_XMAILER X-Mailer =~ /^[a-z ]*$/
>> BA> describe T_LCASED_XMAILER X-Mailer contains only lowercase words
>> BA> score    T_LCASED_XMAILER 0.5
>> 
>> T_LCASED_XMAILER -- 34193s/5681h of 100794 corpus (82099s/18695h) 02/17/04
>> 
>> Hits 30% of my ham.

BJN> You know, this has been discussed a lot on the list already (search the
BJN> archive for "X-Mailer"); why reinvent the wheel?  Here's the rule I'm
BJN> using now, based on one that was posted weeks ago.

BJN> # X-Mailer handling
BJN> # Note that one person reported FP on "X-Mailer: webmail.delfi.lt"
BJN> # so we include "." after "^A-Z0-9"

BJN> header BCS_XMAILERBOGUS       X-Mailer =~ /^[a-z][^A-Z0-9.]*$/
BJN> describe BCS_XMAILERBOGUS     X-Mailer has NO uppercase letters, numbers, 
dots
BJN> score BCS_XMAILERBOGUS        2.0

Works OK.  My results:
BCS_XMAILERBOGUS -- 2014s/2h of 100794 corpus (82099s/18695h) 02/18/04
Ham Matches:
# BCS_XMAILERBOGUS="a script\n"  [Found in email from Macromedia.com, re: 
Dreamweaver]
# BCS_XMAILERBOGUS="ehouse\n"    [Found in email from gmcard.com, re: GM brand 
credit card, to card holder]

Bob Menschel



Reply via email to