Re: INFO_TLD

2007-01-17 Thread Eric A. Hall

On 1/16/2007 1:52 AM, Eric A. Hall wrote:
> On 1/16/2007 12:06 AM, Theo Van Dinter wrote:
>> On Mon, Jan 15, 2007 at 10:44:33PM -0500, Eric A. Hall wrote:
>>> sa-update nuked INFO_TLD which I was still finding useful
>>> can somebody with the rule send it to me? thanks

One of the aggressive porno spammers is all about the .info so in case
anybody else is looking for these

uri  INFO_TLD  /\.info(?::\d+)?(?:\/|$)/i
describe INFO_TLD  Contains an URL in the INFO top-level domain
scoreINFO_TLD  1.0

btw, I run with a lot higher than 1.0 here

-- 
Eric A. Hallhttp://www.ehsco.com/
Internet Core Protocols  http://www.oreilly.com/catalog/coreprot/


Re: INFO_TLD

2007-01-15 Thread Eric A. Hall

On 1/16/2007 12:06 AM, Theo Van Dinter wrote:
> On Mon, Jan 15, 2007 at 10:44:33PM -0500, Eric A. Hall wrote:
>> sa-update nuked INFO_TLD which I was still finding useful
>> can somebody with the rule send it to me? thanks
> 
> It's pretty straightforward to write, but the rule still exists in the
> standard 3.1 install.  Check out /usr/share/spamassassin or the tarball.

got it

-- 
Eric A. Hallhttp://www.ehsco.com/
Internet Core Protocols  http://www.oreilly.com/catalog/coreprot/


Re: INFO_TLD

2007-01-15 Thread Theo Van Dinter
On Mon, Jan 15, 2007 at 10:44:33PM -0500, Eric A. Hall wrote:
> sa-update nuked INFO_TLD which I was still finding useful
> can somebody with the rule send it to me? thanks

It's pretty straightforward to write, but the rule still exists in the
standard 3.1 install.  Check out /usr/share/spamassassin or the tarball.

-- 
Randomly Selected Tagline:
Man 1:  Ask me the what the most important thing about telling a good joke is.
 
 Man 2: OK, what is the most impo --
 
 Man 1: __TIMING!


pgpEbXdGbU5Ii.pgp
Description: PGP signature


INFO_TLD

2007-01-15 Thread Eric A. Hall

sa-update nuked INFO_TLD which I was still finding useful

can somebody with the rule send it to me? thanks


-- 
Eric A. Hallhttp://www.ehsco.com/
Internet Core Protocols  http://www.oreilly.com/catalog/coreprot/


Re: BIZ_TLD and INFO_TLD

2006-11-03 Thread jdow

From: "Giampaolo Tomassoni" <[EMAIL PROTECTED]>


at 2006. november 3. 18.20 Loren Wilton wrote:
> Still seem to be mostly spammers here.  There is a slight 
increase in ham,
> but I don't think it would really change the scores all that 
much.  I have

> both of these domains scored at 5 with no problems.
Why don't you use simplex algorithm (or similar) to compute 
optimal scores?


I don't have a reliable ham corpus: my customers mostly use pop3...

<< And getting one for an ISP must be a real sonovabitch, too.

{^_^}


Re: BIZ_TLD and INFO_TLD

2006-11-03 Thread jdow

From: "Péntek Imre" <[EMAIL PROTECTED]>

Still seem to be mostly spammers here.  There is a slight increase in ham,
but I don't think it would really change the scores all that much.  I have
both of these domains scored at 5 with no problems.

Why don't you use simplex algorithm (or similar) to compute optimal scores?

<< Local experience and laziness. When it becomes a problem we lower it
a little. I don't score them as high as he does, though. That's one of
the joys of per user scores, rules, and bayes.

{^_^} 



R: BIZ_TLD and INFO_TLD

2006-11-03 Thread Giampaolo Tomassoni
> at 2006. november 3. 18.20 Loren Wilton wrote:
> > Still seem to be mostly spammers here.  There is a slight 
> increase in ham,
> > but I don't think it would really change the scores all that 
> much.  I have
> > both of these domains scored at 5 with no problems.
> Why don't you use simplex algorithm (or similar) to compute 
> optimal scores?

I don't have a reliable ham corpus: my customers mostly use pop3...

---
Giampaolo Tomassoni - IT Consultant
Piazza VIII Aprile 1948, 4
I-53044 Chiusi (SI) - Italy
Ph: +39-0578-21100

MAI inviare una e-mail a:
NEVER send an e-mail to:
 [EMAIL PROTECTED]

> -- 
> With regards: Imre Péntek
> E-Mail: [EMAIL PROTECTED]



Re: BIZ_TLD and INFO_TLD

2006-11-03 Thread Péntek Imre
at 2006. november 3. 18.20 Loren Wilton wrote:
> Still seem to be mostly spammers here.  There is a slight increase in ham,
> but I don't think it would really change the scores all that much.  I have
> both of these domains scored at 5 with no problems.
Why don't you use simplex algorithm (or similar) to compute optimal scores?
-- 
With regards: Imre Péntek
E-Mail: [EMAIL PROTECTED]


Re: BIZ_TLD and INFO_TLD

2006-11-03 Thread Loren Wilton
Still seem to be mostly spammers here.  There is a slight increase in ham, 
but I don't think it would really change the scores all that much.  I have 
both of these domains scored at 5 with no problems.


   Loren



BIZ_TLD and INFO_TLD

2006-11-03 Thread Giampaolo Tomassoni
Aren't them a bit outdated?

I have a couple of FPs due to them scoring 2.whatever on an opt-in mailing list 
(at least, it seems so).

I know I can lower their scores. I was just wondering why their default score 
is so high: maybe when .biz and .info TLDs started operating, they were mostly 
used by spammers... What about now?

Actually I guess there are legitimate (and unlucky) senders with .biz and .info 
domains.

---
Giampaolo Tomassoni - IT Consultant
Piazza VIII Aprile 1948, 4
I-53044 Chiusi (SI) - Italy
Ph: +39-0578-21100

MAI inviare una e-mail a:
NEVER send an e-mail to:
 [EMAIL PROTECTED]