I agree it would be wise to allow this to auto-promote, but given the small size of our ham corpus and the fact that this pattern could rarely but legitimately appear in non-spam, perhaps we should manually cap its score to be on the safe side.

To throw out an arbitrary number I'd suggest 0.9 points?

Warren

On 02/21/2011 07:19 AM, [email protected] wrote:
Author: jhardin
Date: Mon Feb 21 17:19:54 2011
New Revision: 1073076

URL: http://svn.apache.org/viewvc?rev=1073076&view=rev
Log:
Allow obfu rule to be published

Modified:
     spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf

Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
URL: 
http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf?rev=1073076&r1=1073075&r2=1073076&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf Mon Feb 21 
17:19:54 2011
@@ -25,5 +25,5 @@ describe      URI_OBFU_TLD      URI top-

  body          URI_DEOBFU_INSTR  
/(?:delete|remove|take\sout)(?:\sthe)?\sspaces/i
  describe      URI_DEOBFU_INSTR  How to deobfuscate this URI
-tflags        URI_DEOBFU_INSTR  nopublish
+#tflags        URI_DEOBFU_INSTR  nopublish




Reply via email to