Hello Ralph, Tim,

Friday, May 7, 2004, 12:58:59 PM, you wrote:

RS> Tim Donahue wrote:

 >> After talking to several people that have gotten false postitives when
 >> trying to send us email, it seems that there may be a problem with
 >> RATWR7a_MESSID.

RS> Hmm... I do remember that lately some of the mail I sent using Mozilla
RS> Thunderbird got tagged as containing a ratware message ID, but I don't
RS> remember the name of tha rule that was triggered.

Certainly possible.  My corpus check this last weekend shows
#counts RATWR7a_MESSID  11589s/2008h of 115925 corpus (94616s/21309h) 05/01/04
and suggests a score of 0.278.
The 4/30/04 version I use has an even more conservative internal score of
0.252. 
What version are you using?

IOW yes, it hits lots of ham, but by itself shouldn't contribute all that
much to flagging a spam as false positive (though it will add to an
emails problem if it's a spammy ham).

I don't think it's fair to claim that any single rule with a score under
0.3 "has a problem", since you'd need more than 16 such rules to score a
false positive. Rather, the combination rule set has a problem, and we'd
need to know more about all the other rules that hit to be able to
identify where the best resolutions might lie.

Bob Menschel



Reply via email to