Dimitrios wrote:
On Thu, 08 Jul 2004 11:42:13 +0200 "Jesse Houwing" <[EMAIL PROTECTED]> wrote:
39 0 39 0.000 0.00 1.00 GR_DOMAIN_ARGOSOFT
1 0 1 0.000 0.00 1.50 GR_DOMAIN_M5MAILER4
interesting results.
obviously you don't have any Greek-specific spam, so these rules pretty much
didn't hit anything specific.
its also interesting that you've got ham that hit the ArgoSoft and Mach5 rules,
in my experience ArgoSoft is a well known util used on exploitable systems
for repote spamming (open relay smtp), Mach5 Mailer is also a spammer tool
which you can buy from several websites.
The one M5 mailer could be a spam messag ethat slipped through, I'll
check that. I don't think I've got 39 misclassified mails for the other
catagory.
I can email you a few of my Greek spam if you are interested.
At present I don't have time to check them, I'm quite busy on a few
other rules and non-sa related work. I'll keep this in mind for the future.
thank you for taking the time to run the tests, much appriciated.
You're welcome. if you need further masschecks you can always email me,
I'll run them in between my own tests.
Jesse
