Sandy, I think you're missing the point.

My weighting system has enough slop in it to allow for some points to be
given to legitimate senders. Even the Declude JunkMail list now gets 4
points for having [ and ] in the subject, but it still comes through fine.
If we try to prevent all false positives we get a lot of junk in our
inboxes. I don't need this filter to have most list emails held for review.
The shoot-first-ask-questions-later RBLs do an excellent job of flagging
legitimate email as SPAM all by themselves. My weights are low enough to
make little or no difference with legitimate emails.

It's these that will get held:

What is G.E.N.ERIC VI.A.G.R.A?   (16 points)
[EMAIL PROTECTED] --> 75% D1SC0UNT!!     nisbabct jvvjhgyxmk   (22 points)

Helpful suggestions are appreciated, but ridicule is not.

Mike


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Sanford Whiteman
Sent: Thursday, November 06, 2003 2:16 PM
To: Mike Gable
Subject: Re: [Declude.JunkMail] Non-alpha-numeric subject filter


> It  is  catching  a  lot more junk than before.

Checked your FPs lately?

> SUBJECT 2 CONTAINS -

I get countless legit e-mails with hyphens in the Subject.

> SUBJECT 2 CONTAINS [
> SUBJECT 2 CONTAINS ]

Mailing list e-mails very often use brackets in the Subject, so you're
giving more weight to an area that's already dangerous.

> SUBJECT 2 CONTAINS :

'Re:' gets a demerit?

> SUBJECT 4 CONTAINS ;

A perfectly legitimate punctuation mark.

> SUBJECT 2 CONTAINS "

We can't use quotation marks anymore?

> SUBJECT 2 CONTAINS ,

NO COMMAS???

> SUBJECT 2 CONTAINS ?

NO QUESTION MARKS???

I  place  approximately  zero  stock  in  tests  this general. YMMV, I
suppose.  Or  perhaps  you're  not  mentioning the aggregate threshold
you're going for before actual points are assigned.

-Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
------------------------------------

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to