Abigail Marshall <[EMAIL PROTECTED]> writes:
> Apparently so; but it does correctly identify the email as being
> base-64 encoded. I would simply recommend that you raise the score in
> the local.cf file for the SA test BASE64_ENC_TEXT to near or above
> your minimum spam threshhold. I have yet to see a *valid* email that
> is Base-64 encoded.
Well, the rule (renamed in 2.60-cvs) does false positive about 0.03% of
the time:
4.464 10.5272 0.0283 0.997 0.96 2.69 MIME_BASE64_TEXT
There are also some nice supplementary BASE64-related rules in 2.60-cvs
(most are new since 2.5x).
OVERALL% SPAM% HAM% S/O RANK SCORE NAME
220603 93206 127397 0.423 0.00 0.00 (all messages)
100.000 42.2506 57.7494 0.423 0.00 0.00 (all messages as %)
4.464 10.5272 0.0283 0.997 0.96 2.69 MIME_BASE64_TEXT
2.849 6.7109 0.0243 0.996 0.96 1.00 MIME_BASE64_LATIN
4.549 10.6420 0.0918 0.991 0.95 1.00 MIME_BASE64_NO_NAME
0.097 0.2264 0.0024 0.990 0.93 1.00 MIME_BASE64_ILLEGAL
2.614 6.0629 0.0911 0.985 0.92 1.00 MIME_BASE64_BLANKS
Number of messages hit by 1-5 of those rules:
1/5 2/5 3/5 4/5 5/5
spam 10185 9896 7401 4349 17
ham 227 42 33 1 0
So, hitting 2 out of 5 is going to be pretty damning. Only 42 ham out
of 127397 ham match 2 out of 5 of those rules (0.033%).
Daniel
--
Daniel Quinlan anti-spam (SpamAssassin), Linux, and open
http://www.pathname.com/~quinlan/ source consulting (looking for new work)
-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
