spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Pierre Thomson" <PierreThom...@bruderhof.com>
Subject RE: Couple of useful tests
Date Wed, 01 Jun 2005 19:16:02 GMT
Even after corpus tests, I never give a single rule a score over 3 (local threshold is 6).
 There's no reason a real live person couldn't choose a consonant-only email name, and I know
of some universities that give out addresses like "stud42387921@university.edu" which would
trigger your first rule.

Pierre Thomson
BIC


-----Original Message-----
From: Craig Jackson [mailto:cjackson@localsurface.com]
Sent: Wednesday, June 01, 2005 2:50 PM
To: users@spamassassin.apache.org
Subject: Couple of useful tests


Hi,
I created these tests which I find very accurate for detecting spam and 
so thought I'd let the list have a view. Lots of numbers or consonants 
in the reply-to usually bodes ill.

header REPLY_TO_NUMS_CJ Reply-To =~ /[0-9]{6,}/
score REPLY_TO_NUMS_CJ 5.000
header RET_PATH_NUMS_CJ Return-path =~ /[0-9]{6,}/
score RET_PATH_NUMS_CJ 5.000
header REPLY_TO_CONSON_CJ Reply-To =~ /[bcdfghjklmnpqrstvwxyz]{5,}.*@/i
score RET_PATH_CONSON_CJ 5.000
header RET_PATH_CONSON_CJ Return-path =~ /[bcdfghjklmnpqrstvwxyz]{5,}.*@/i
score RET_PATH_CONSON_CJ 5.000


If you can improve, please do -- have no mercy.

Craig Jackson


Mime
View raw message