From: "Ethan Albone" <[EMAIL PROTECTED]> To: "Questions and Answers for users of ASSP Anti-Spam SMTP Proxy" <[email protected]> Sent: Saturday, February 17, 2007 8:47 AM Subject: Re: [Assp-user] 1.3.0(3) and bayesian filter problem
> and BombHeader Regular Expressions against Header to score only (3). > > yes because > "\d+\s+(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\s+\d\d\d\d\s+\d\d:\d\d(:\d\d)?\s+[+\-]\d\d(?!00|30|45)\d\d" > is too much sensitive too. uh ? that simply means time offsets have a specific format, you can't tell your timezone is utc + 0482 but valid time offsets are -0200 +0500 etc. [format is hhmm, where minutes can only be 00 30 and 45, i know no other valid values] so, pls, show me the false positives with this bomh. I'm really curious to see what MTA uses wrong values. That is a 'formal' check for rfc compliance, not my idea about what should trigger your spam alert. > > Please add again you bombre.txt which was very very good. > that was a completely different concept. That was what fritz tough was spam, based on his own experience, good for his users under his own rules and with 800.000 whitelists. Not a formal check based on rfc. But assp is great because allows you to create your own strategy valid for your user base [for a long a time on my own personal maibox i blocked all mail with a 200/8 anywhere in the headers. That worked for me, but it would be plain stupid to implement at a wider level] . apart from formal checks , the nodalay, and a few very limited lists, i think it's better that every postmaster builds his own setup based on his particular needs. There ain't such thing as good running defaults with all white/black/np/sender blocking precompiled. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
