The CASHCASHCASH rule tests for the string '$$$' not for the phrase CASH! CASH! CASH! The ADDRESSES_ON_CD rule caught almost as much ham when tested against a half-million message corpus as it did spam. The BLANK_LINES_90_100 caught MORE ham than it did spam.
http://search.cpan.org/src/JMASON/Mail-SpamAssassin-2.60/rules/STATISTIC S-set1.txt The reality is that you THINK these should be higher, but they're not as indicative of spam as you THINK they are. This has been empirically tested with a statistically significant sample. Click the link above and you'll see the results of the testing on that corpus. I think that since you work in an environment that does not tolerate any mention of the word "v?a?ra" you should score these rules higher in your local.cf file. That's the beauty of being able to simply put score ADDRESSES_ON_CD 97.0 in your own config files. -tom > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of maarten van den Berg > Sent: Friday, November 07, 2003 3:25 PM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] scoring system and values... > > But put yourself in my place. Upon looking at those rules I > see al LOT of inconsistencies. For instance, I found these > rules that have score of zero(!) (and these are merely the > top of a large iceberg) > > score CASHCASHCASH 0 > score ADDRESSES_ON_CD 0 > score BLANK_LINES_90_100 0 > score EJACULATION 0 > score HERBAL_V+AG+A 0 > > One could argue that yelling CASH CASH CASH is a valid sales > pitch in a normal mail. But hey, are we being realistic here > ? How could anything but spam have this property ? For > addresses_on_cd one could argue that it IS possible to have > such a statement in a regular email (albeit that's already stretching > it) but then I would retort that although possible it would > stand to reason to give it at LEAST a score of 0.5 or so, but > not _zero_! And the third, well, it could be a misconfigured > client, but still, is an email that is 90% <thin air> worth > of being treated as a valid email? And the fourth... of > course you will find "ejaculation" in many many forums but, > again, give it at > least some low figure but NOT equal zero... > And... well I won't even go into the fifth rule... come on ;-) ------------------------------------------------------- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP, Perl, XML, Java, MySQL, WebDAV, and more! http://www.apachecon.com/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
