On Wed, 2 Apr 2014, [email protected] wrote:

On 04/01, John Hardin wrote:
These appear to be doing pretty good, I've exposed them for scoring
and renamed them to __DX_TEXT_*

Cool, thanks.

Question:

I'm seeing spams that are minor variations on those rules. Do you think it's better to add more individual static (non-alternation) rules, or modify those to cover the variants?

Which would be better from the point of view of external optimization tools, e.g. the rules compiler?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Where We Want You To Go Today 09/13/07: Microsoft patents in-OS
  adware architecture that incorporates monitoring and analysis of
  user actions and interrupting the user to display apparently
  relevant advertisements (U.S. Patent #20070214042)
-----------------------------------------------------------------------
 671 days since the first successful private support mission to ISS (SpaceX)

Reply via email to