-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jean-Paul Natola wrote: > > well that is why I would only score it like a total of 1.5 points, that > combined with the other KAM_GEO rule, would then take it over the 5.5 > threshold, the 1.5 points on its own would not discard the message
Sure thing, it's your choice what to check for and how to score it, I'm just offering advice. In this case, my advice is that "more than 3 '%' symbols in a message is worth 1.5 points" might be a bit drastic. Here's how I scored a typical loan spam: 1.5 CM_TXT_LOAN BODY: Loan at a certain rate. 2.0 TVD_DEAR_HOMEOWNER BODY: TVD_DEAR_HOMEOWNER 1.5 CM_CREDIT_SCORE BODY: Your score doesn't matter 1.0 CM_IMMEDIATE_CASH BODY: Immediate cash 1.0 CM_DEAR_HOMEOWNER BODY: Dear Homeowner Plus BAYES_99 for 4 points, and 4 x URIBL hits for 11.6 in this case. C. - -- Craig McLean http://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered by FreeBSD, and GIN! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) iD8DBQFEaLZcMDDagS2VwJ4RAh4HAKCX9CrbF6bwOhV4SJOGmokluyRG3wCgtSzW sQxXhlCVdTvk86q7FhEXRDw= =a+n2 -----END PGP SIGNATURE-----
