Agree on DCC, it only tells if bulk and doesn't discriminate on Spam or not. I have whitelists, and some home made rules which fix most real newsletters.
header VMC_S_HAS_DATE Subject =~ /[01]?\d[-\/][0-3]?\d[-\/](20)?0[3-9]/ describe VMC_S_HAS_DATE VMC-Subject contains a date score VMC_S_HAS_DATE -3.0 header VMC_F_NEWS_LIST From =~ /([EMAIL PROTECTED]|[EMAIL PROTECTED])/i describe VMC_F_NEWS_LIST VMC-From: news or list hostname in FQDN score VMC_F_NEWS_LIST -2.0 header VMC_S_IS_NEWS Subject =~ /\b(in review|news|list)/i describe VMC_S_IS_NEWS VMC-Sub news newsletter list score VMC_S_IS_NEWS -2.0 header VMC_S_FREQ Subject =~ /\b(monday|daily|week|monthly)\b/i describe VMC_S_FREQ VMC-Sub monday daily week or monthly score VMC_S_FREQ -2.5 header VMC_S_MONTH Subject =~ /\b(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)/ describe VMC_S_MONTH VMC-Sub has month probable newsletter score VMC_S_MONTH -2.5 <<Dan>> > -----Original Message----- > From: Michael Barnes [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 02, 2004 9:18 AM > To: Matt Kettler > Cc: Smart,Dan; users@spamassassin.apache.org > Subject: Re: Image Composition Analysis > > On Tue, Nov 30, 2004 at 07:25:45PM -0500, Matt Kettler wrote: > > Yes, but DCC is still more reliable and faster. (I use both) > > I had to score DCC with 0.1 because it has way too many > false positives. > My local.cf section dealing with this: > > > # too many false posives with this guy, meta corrected below > > score DCC_CHECK 0.1 > > meta DCC_PYZOR (DCC_CHECK && PYZOR_CHECK) > score DCC_PYZOR 2.9 > > > DCC seems to have a large number of _solicited_ bulk email > in its database, and my users get very upset when they sign > up for junk email and it gets marked anywhere near spam. > > Just in my experience, I've noticed that there is a high > correlation between DCC positive hits & Pyzor positive hits > & real spam, so I scored it that way. > > Mike > > -- > /-----------------------------------------\ > | Michael Barnes <[EMAIL PROTECTED]> | > | UNIX Systems Administrator | > | College of William and Mary | > | Phone: (757) 879-3930 | > \-----------------------------------------/ > >
