Re,
I excluded the last two rules from my masscheck to avoid FPs as these
ESPs/X-Mailers are definitely grey, "import rcpt list and blast" sort of ESPs
not black for global use.
If you can point me to some more information on how to do that, on-list or
off-list, I am interested. I am new to this whole business.
In fact I was forced to look at X-Mailer and other strange headers for
French spam that was still getting through with no real easy keywords, and
these guys often ad the good idea to have developped their own "software"
and be proud of it.
#counts FR_SPAMISLEGAL 8s/2h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_SPAMISLEGAL_2 5s/2h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_NOTSPAM 0s/0h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_PAYLESSTAXES 0s/0h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_REALESTATE_INVEST 0s/0h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_ONLINEGAMBLING 0s/0h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_ONLINEMEDS 0s/0h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_REASON_SUBSCRIBE 1s/1h of 3859 corpus (1166s/2693h AXB-MC1)
06/23/08
#counts FR_HOWTOUNSUBSCRIBE 7s/16h of 3859 corpus (1166s/2693h
AXB-MC1) 06/23/08
If these are hit rates with a very minimal daily corpus, don't know if the
present ruleset is ready for production unless you have 0 tolerance for any
bulk, period
I do subscribe to various mailing lists, and none of them seemed compelled
to remind me how to unsubscribe, even less to state me the law about spam.
Even the official government "conseil des ministres" (sum up of the
daily/weekly/whatever government meeting) does not state the "loi
informatique et libertés" anymore (but they do use a company I am getting
a lot of spam from <clearing throat>).
So basically the question is: what makes a spam in French recognizable.
On the other hand I am also worried about the very low hits of most rules.
If all your 1166 spams are in French, we can throw the whole ruleset to
/dev/null (well I'll keep it for me anyway).
A++;
JG
