>>MESSAGEID_RATWARE -- 13479s/973h of 91714 corpus (74113s/17601h) 01/22/04
>>
>>Hits almost a thousand ham here. 93% of the hits are spam, which is very
>>promising. Tighten up the rule a little bit, and we'll probably have a
>>winner.
>>
>header MESSAGEID_RATWARE \
> Message-ID: =~ /<[A-Z0
>From [EMAIL PROTECTED] Thu Jan 22 20:18:10 2004
Date: Thu, 22 Jan 2004 20:18:08 -0800
From: Robert Menschel <[EMAIL PROTECTED]>
To: Regis Wilson <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
Subject: Re: [SAtalk] [RD] spammers write rules for us
>Hello Regis,
>RW> Got a
Hello Regis,
Thursday, January 22, 2004, 7:25:30 AM, you wrote:
RW> Got a spam that's so easy, the spammers write the rules for us:
RW> Message-ID:
RW> <[EMAIL PROTECTED]>
RW> So,
RW> header MESSAGEID_RATWAREALL =~
RW> /\nMessage-ID:.<[^-]{7,13}-[^-]{3,11}-[^-]{2,6}/i
RW>
Got a spam that's so easy, the spammers write the rules for us:
Message-ID: <[EMAIL PROTECTED]>
So,
header MESSAGEID_RATWAREALL =~
/\nMessage-ID:.<[^-]{7,13}-[^-]{3,11}-[^-]{2,6}/i
describe MESSAGEID_RATWARE Message-ID has ratware pattern
score MESSAGEID_RATWARE 0.5
I've s
